Cyber security risk assessment: a plain-English health check
A cyber security risk assessment shows how exposed your business is to the attacks that actually happen: stolen passwords, unpatched software, phishing and ransomware. Our health check reviews your accounts, devices, backups, email and cloud settings. You get a short report that ranks the gaps and tells you what to fix first.
Who asks for it, and what it shows them
The questions people ask you, and what this answers.
- Management“How exposed are we, really?”A checkup against Cyber Essentials and Cyber Trust measures shows where basic security falls short.Cyber Security Agency of Singapore (CSA), read 12 Oct 2026
- Board and shareholders“Are we at least doing the basics?”The Cyber Security Agency found only one in three organisations had fully implemented at least three of the five Cyber Essentials categories.Cyber Security Agency of Singapore (CSA), read 12 Oct 2026
- Insurers“Have you ever had a penetration or social engineering test?”Insurer proposal forms ask this directly.MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026
- Regulators“Do you review security regularly?”PDPC directed the Academy of Medicine to carry out annual security reviews after its breach.Personal Data Protection Commission (PDPC), read 12 Oct 2026
The Cyber Security Agency’s Cybersecurity Health Report 2023 (a survey of 2,036 organisations) found that over 8 in 10 had a cybersecurity incident in a year, and 99% of those reported an impact on the business.
Cyber Security Agency of Singapore (CSA), read 12 Oct 2026What you get
- A review of logins, two-factor sign-in and admin accounts
- Updates, backups and malware protection checked on your devices
- Email, Wi-Fi, remote access and cloud sharing settings reviewed
- A plain-English report ranking each gap by risk
- A fix list you can hand to your IT vendor
- A written health check report with a risk rating for each finding
- A fix list in priority order
A weak admin password, “p@ssword1”, was part of a S$17,500 PDPC penalty. July 2025.
How it works
- You
Tell us your systems, devices and IT vendors, and give us read-only access.
- Us
We check your settings and evidence with your IT contact, against a recognised control baseline.
- Result
You know your top risks and the order to fix them.
Common questions
What does a cyber security risk assessment cover?
Accounts and passwords, multi-factor authentication (MFA), software updates, backups, malware protection, email and phishing defences, Wi-Fi and remote access, cloud sharing and vendor access. We look at settings and evidence, not just answers to a questionnaire.
Is a health check the same as an IT security audit?
Close. An IT security audit tests controls against a standard for a formal opinion. Our health check is lighter and faster: it finds the gaps that matter most and ranks the fixes, so you can act within weeks.
How much does a cyber security assessment cost?
The fee depends on how many staff, devices, sites and cloud services are in scope, and how much is documented. You get a fixed-fee proposal after a short scoping call. Government grants may cover part of the cost. We check at your first call. Tell us your scope in 5 minutes and you get a fixed-fee proposal within 2 working days: Scope your project
Do small businesses need cyber security?
Yes. Most attacks are automated and look for any weak password or unpatched system, whatever the size of the business. The Personal Data Protection Act (PDPA) also requires reasonable security, and the Personal Data Protection Commission (PDPC) enforces that rule.
Latest PDPC case on this topic · 2026-09-21 · Education and childcare · Voluntary undertaking
A critical firmware flaw on a perimeter firewall gave attackers administrator access and a path to files holding student and staff data; apply firmware fixes promptly.
Read the PDPC decision of 21 September 2026, on pdpc.gov.sg (opens in a new tab)Compliance is black and white. Your business isn’t.
Leave your details and an adviser replies within 2 office hours.
Download a one-page brief for your management or board (PDF, 68 KB)