Not because nobody cares, but because the answer is spread across half a dozen places: an infrastructure setup that’s grown in layers, line-of-business apps nobody has reviewed since they went in, endpoints that multiplied when everyone went hybrid, AI platforms that arrived without anyone approving them, and policies written for a business that looked different three years ago. This diagnostic pulls all of it into one place and tells you plainly where the risk is.
Two video calls with a Senior Haber Group Engineer and a Customer Advocate. The first runs 45 to 65 minutes, the second 30 to 45. Nothing installed, nothing scanned without you watching.
You end up with a high-level RAG report rating your risk across every area we review.
Your infrastructure, on-premise and cloud. Your line-of-business applications. The endpoints your people actually work on. The AI platforms in use across the business.
Plus the three policies that matter: information security, AI, and device acceptable use.
Two calls, under two hours in total, and the diagnostic is free.
45 to 65 minutes
Your IT manager, director or CIO, plus whoever holds the budget. We map your infrastructure, apps, endpoints and AI platforms, and review your security, AI and device policies.
30 to 45 minutes
IT operations only, including your current IT partner if you use one. A screen-share review of servers and configuration, so we’re assessing what’s actually there rather than what’s documented.
RAG rated
A high-level report rating your risk red, amber or green across each area. Clear enough to take to a board, specific enough for your IT team to act on.
A RAG-rated view of where your risk sits across infrastructure, applications, endpoints, AI platforms and policy. Plain enough that a non-technical reader can follow it.
Yours to keep and act on, whether you work with us or not.
The diagnostic tells you where the problems are. A full audit tells you exactly how bad each one is and what fixing it involves, with detailed findings and a remediation plan.
That’s a paid engagement, scoped once we’ve seen the RAG report together.
Yes. Two calls and a RAG-rated risk report, no obligation and nothing to sign. The detailed audit is separate and paid, if you decide you want it.
Call one needs your IT manager, director or CIO, plus whoever holds the budget. Call two is IT operations only, so your technical people can get into the detail without anyone sitting through it unnecessarily.
It shouldn’t. We invite them to the second call and work from what they show us. A good provider usually welcomes a second pair of eyes, and often already knows about half the issues and has been trying to get them funded.
No. The second call is a screen-share your IT operations team drives. Nothing goes on a device and nothing happens without someone watching.
Because AI is now one of the more common ways data leaves a business. Staff pasting client files into consumer accounts is a security issue, not a separate category. If you don’t have an AI policy yet, our free template is a good place to start.
Free, two calls, no obligation. Fill in the form and we’ll set up the first one.
