Device security that stands up to customers and auditors
We harden your laptops and phones, then give you the reports to prove it when a customer questionnaire or an auditor asks.
- Frameworks
- CIS Benchmarks, ISO 27001, SOC 2
- Works with
- Jamf Pro, Intune, Addigy, Microsoft Defender for Endpoint and other endpoint security tools
- You receive
- A gap report, applied security baselines and an evidence pack
The questions customers now ask
Customer security questionnaires ask exactly how you protect laptops. Are disks encrypted? Do updates install within a set time? Can a lost device be wiped?
Many companies already own the tools to say yes, but not the settings or the evidence.
What's included
- Gap assessmentYour current device settings compared with CIS Benchmarks, with each gap ranked by risk.
- Encryption everywhereFileVault and BitLocker enforced, with recovery keys stored centrally.
- Patch deadlinesOperating system and browser updates installed within the window you choose.
- Screen lock and firewallBasic controls enforced on every device, not left to each user.
- Endpoint protectionMicrosoft Defender for Endpoint, CrowdStrike, SentinelOne or your chosen tool, deployed through your management platform.
- Compliance reportingDashboards that show which devices meet policy and which need attention.
- Audit evidenceExports, screenshots and written procedures mapped to ISO 27001 and SOC 2 controls for endpoint devices.
- Questionnaire answersAccurate answers for the device sections of customer security questionnaires.
How it runs
Assess
Compare current settings with CIS Benchmarks.
Prioritise
Rank gaps by risk and effort.
Apply
Roll out baselines, pilot first.
Report
Set up compliance dashboards.
Review
Check results every quarter.
What you get at the end
Everything is in your company's name and documented, so you are never tied to us.
- A gap report ranked by risk
- Security baselines applied to every managed device
- Compliance dashboards your team can check any time
- An evidence pack mapped to ISO 27001 and SOC 2 endpoint controls
Questions
Can you get us ISO 27001 or SOC 2 certified?
We prepare the device controls and the evidence. Certification itself is issued by an accredited auditor after their own review.
Will tighter security slow our team down?
We pilot every change with a small group first and adjust anything that gets in the way of real work.
Do we need new security software?
Often not. Many companies already own the tools through Microsoft 365 or their device management platform. We start with what you have.
Related services
Guides on this topic
Start with a free device audit
Tell us what you have. We review your devices and settings, then send a written report and a fixed quote.