Start with what your business needs
Describe the issue you want to resolve and the decision the assessment should support. A recurring outage, a move, an upcoming project, or unclear administrative ownership may call for different review boundaries.
Bring a short list of recent problems and operational constraints. Identify the person who can approve scope and coordinate with existing providers.
Information to prepare
| Category | Useful information | Question to answer |
|---|---|---|
| Business goals | Priority issues, locations, hours, and planned changes | What decision should the review support? |
| Users and accounts | Approximate user count and named administrators | Who owns account access and transitions? |
| Devices | Inventory summary, platforms, and management tools | Which devices support important workflows? |
| Network | Locations, provider contacts, and available diagrams | Who supports connectivity and key equipment? |
| Backup and recovery | Coverage summary and known recovery-test records | Who is responsible for recovery planning? |
| Applications | Important applications and service-owner contacts | Which systems are essential to normal work? |
| Support | Current contracts, coverage, and escalation contacts | Which responsibilities are already assigned? |
Agree on boundaries
- Name the systems, sites, and business processes included.
- Specify what access or evidence is needed and how it will be handled.
- Identify excluded activities, including changes or testing not authorized.
- Agree on the deliverables, timeline, fees, and review meeting.
- Define how findings and follow-up work will be discussed.
What to avoid sending in a marketing inquiry
Do not put passwords, recovery codes, customer records, or exports of sensitive system data into a general inquiry form. Describe the concern at a high level. If technical evidence is needed later, agree on a suitable handling process.
Layer Zero Consulting offers an initial free consultation. A technical assessment is a separate, scoped engagement.
Questions before you get started
Do I need administrator access before the consultation?
No. The initial conversation can focus on business needs and what you know about the environment. Any later access requirements are agreed separately.
Is this checklist a security audit?
No. It helps prepare information and questions. It does not assess your systems or establish compliance.
Can my current provider join the conversation?
An assessment can be coordinated with relevant stakeholders when you authorize that involvement and the scope calls for it.