Is your data really safe? A Security Health Check for Mumbai businesses
AI-powered scams and ransomware are rising. We review the ten areas that matter and give you a plain-language report with a short action list.
- Ten areas reviewed, from logins to backups to AI use
- Written report with a Low / Medium / High risk level
- AI usage policy template for your staff
Ten areas, one clear report
Each area has simple checks. You see what is OK, what needs action, and what to fix first.
1. Identity & access
- MFA on email, VPN and admin accounts
- Unique accounts, no shared admin logins
- Leavers disabled promptly
2. Laptops & desktops
- Antivirus / EDR active and updated
- Patching and disk encryption
- No local admin rights by default
3. Servers & Active Directory
- Supported, patched servers
- AD cleanup and privileged groups review
- RDP not exposed to the internet
4. Network & Wi-Fi
- Firewall rules and firmware reviewed
- No default passwords
- Guest Wi-Fi separated
5. Email & phishing
- SPF, DKIM and DMARC
- Phishing and malware protection
- Staff know how to report scams
6. Backup & recovery
- 3-2-1 backups with an offline copy
- Restore tested in the last 90 days
- Tally data included
7. Data protection
- Where sensitive data lives
- Who can reach shared folders
- Basic DPDP Act readiness
8. AI & cloud apps
- AI usage policy and approved tools
- No client data in free AI tools
- Shadow-AI and cloud app check
9. Monitoring & response
- Logs and alerts reviewed
- Asset inventory
- Written “what to do if hacked” steps
10. People & process
- Staff awareness briefing
- Call-back check for payment changes
- Vendor access and physical security
A report you can act on
Risk level
A clear Low, Medium or High rating for your overall setup.
Priority findings
The top issues with a recommendation and a target date for each.
Next steps
What to fix first, and how an AMC or SLA can keep it fixed.
A health check is a review of your setup, not a guarantee against attack. It does not include penetration testing or legal advice.
Using AI without leaking your data
Staff pasting client data into free AI tools, and fake emails or calls that sound real, are now common risks.
AI usage policy
A written policy: which tools are approved, and what must never be pasted (client data, passwords, Aadhaar, PAN, bank details).
Fraud safeguards
A call-back rule for payment or bank-detail changes, to guard against fake emails and deepfake requests.
Data protection basics
Where sensitive data lives, who can see it, and basic readiness for the DPDP Act 2023.
From booking to report in three steps
Tell us your setup
Number of users, devices, servers and the tools you use.
We review
On-site or remote, we check the ten areas using the access we agreed with you.
Report and walkthrough
You get the written report with prioritised fixes, and we walk you through it.
Security Health Check questions
What is a Security Health Check?
It is a structured review of your logins, devices, servers, network, email, backups, data access and AI tool usage. You get a written report with a risk level and a short, prioritised action list.
Is this a penetration test?
No. It is a health check of your setup and settings against good-practice controls. It does not include penetration testing, and no review can guarantee that an incident will not happen.
Do you need access to our systems?
We need limited access to review settings, such as read access to servers, firewall, email admin and backup consoles. We agree the access with you before we start.
How long does it take and what does it cost?
It depends on the number of users, devices and servers. We confirm the scope, time and price in a written quotation before we start.
Can you fix the issues you find?
Yes. We can fix findings under a separate quotation, or support you regularly through an AMC or SLA. You are free to use your own team for the fixes.
Do you help with an AI usage policy?
Yes. The review checks which AI tools your team uses and what data goes into them, and we provide a ready AI usage policy template that you can adapt for your staff.
Does this cover India's DPDP Act?
We review basic readiness, such as consent, safeguards and breach handling. For legal requirements, please confirm with your legal adviser.
Book your Security Health Check
Tell us your setup and we will send a written quotation.