Cybersecurity Assessment Service

Assessment service offerings

The REN-ISAC offers an array of assessment options to best fit your needs and budget. You can choose from the following.

Stand-alone Comprehensive General Assessment - An assessment of the information security standing of the entire organization based on the NIST Cybersecurity Framework, which includes a review of and recommendations on asset management, governance, risk assessment, access control, data security, detection processes, response and recovery planning, and much more.

Comprehensive General Assessment with Add-ons - Bundle our NIST-based general assessment with any or all of the following add-ons for a discounted price.

  • Compliance reviews for NIST Gap, HIPAA, and/or FERPA
  • Incident response plan review
  • Physical security
  • Deployment of cloud services
  • Policy reviews

Stand-alone Services - Our standalone services include the list above, penetration testing, and tabletop exercises. All stand-alone services are priced individually.

The peer assessment staff are always available to answer questions and book future assessments. Contact us to schedule a phone consultation.

How a General Assessment Works

Step 1: You choose scope, topics, dates of the assessment.
Step 2: Team of trained, certified professionals researches and reviews institution-specific practices.
Step 3: Team performs an in-person analysis including personnel interviews with staff across IT and other functional areas.
Step 4: Team prepares early report drafts for your review.
Step 5: Final report with findings, recommendations, and an executive summary is delivered.