glacierr
get in touch
stage · 01assess
We come in narrow, look hard, and leave you with a defended posture and the evidence to prove it. Anything you can assess — security framework readiness, cost, risk, configuration, detection coverage — sits inside Assess.
01what sits in assess
Every assessment ends in two artefacts: a private findings report for the leadership team, and an auditor-facing evidence pack mapped to whatever framework you're held to. Both written by the consultants who did the work.
NIST 800-53, ISO 27001, CIS, SOC 2 — pick your framework, we map control-by-control and produce the evidence pack in the format the auditor expects.
Purview-led DLP posture. Where regulated data lives, how it moves, whether sensitivity labels are applied, whether enforcement matches your declared intent.
Detection coverage against MITRE ATT&CK, ingestion sanity (cost vs. value), alert quality, runbook coverage, on-call burden. What your SOC catches — and what it quietly misses.
Architecture and configuration review across Microsoft Entra, Sentinel, Defender, Purview. Sentinel ingestion-cost audits to set the baseline for any cost-reduction work in Build.
02packages
Starting prices assume standard tenancy complexity. First call shapes the exact scope and we issue a fixed-fee proposal against it. We don't charge by the day.
Purview-led data protection posture. Where regulated data is, where it shouldn't be, and whether enforcement matches your labels.
Full control assessment against the families your auditor will sample. Gap analysis, remediation roadmap, audit-ready evidence pack.
Detection coverage, ingestion sanity, alert quality, runbook audit. Tells you what your SOC catches — and what it doesn't.
All packages are billed against milestones, net 14 from acceptance. Travel within the UK is included. Scoped custom assessments outside the packages above are quoted per opportunity.
03proof
Anonymised on purpose — references available under NDA at the second call. Come in narrow, find what matters, leave the evidence pack.
Mid-market healthcare group. AC / AU / SI control families fully unmapped to evidence. Pack delivered on week seven; audit closed without finding.
UK challenger bank. Purview deployed, sensitivity labels applied, no DLP policies enforcing them. Gap mapped, policy candidates drafted for their team to implement.
Mid-market manufacturer. Sentinel ingestion ranked by rule-fire ratio; 41% of monthly volume tied to rules that hadn't fired in 90 days. Coverage gaps on lateral-movement TTPs surfaced and queued.
Tell us the framework, the window and the scope on the first call. We'll come back inside a week with a fixed-fee proposal sized to the audit — and a delivery plan that lands the evidence pack before the auditor walks in.