IT Baseline Assessment for Small Businesses
For businesses that want to understand their IT environment before making decisions.
What Does an IT Baseline Assessment From SNL-Tech Services Include?
An IT Baseline Assessment from SNL-Tech Services gives your business a documented view of its current technology environment. The assessment is designed to identify what is in place, where important gaps may exist and what should be addressed first.
SNL-Tech Services reviews the systems, accounts, devices, security controls, backups, access, documentation and other technology that support your business. The goal is to help you understand how your environment is currently configured and managed, not simply hand you a list of technical findings.
You receive findings in plain language along with a prioritized action plan that can support technology planning, cybersecurity improvements, cyber insurance preparation, compliance related work or conversations with your existing IT provider.
What Can Go Wrong Without an IT Baseline Assessment?
A small business can operate for years without having a clear picture of how its technology is actually configured or managed. Systems get added, employees come and go, cloud services change, devices are replaced and security settings are adjusted over time. Without a documented baseline, important gaps can easily go unnoticed.
Backups may exist but never be tested. Former employees may still have access to business systems. Microsoft 365 or Google Workspace may be using older security settings. Devices may not be consistently protected or managed. Important accounts, vendors, subscriptions or administrative access may not be clearly documented.
These issues do not necessarily mean something is already wrong. They mean the business may be making technology, cybersecurity, insurance or compliance decisions without having a reliable picture of its current environment.
An IT Baseline Assessment from SNL-Tech Services helps establish that starting point so the business can decide what needs attention now, what can wait and what may already be working well.
Who Is an IT Baseline Assessment For?
An IT Baseline Assessment is a good fit for small businesses that want a clearer understanding of their technology environment before making decisions about security, compliance, insurance, upgrades or ongoing IT support.
It can be especially useful for businesses that have grown over time without formal IT documentation, have changed providers, inherited older systems, are preparing for a cyber insurance renewal, or are considering Managed IT Services and want to understand their current environment first.
It can also help after a security incident, operational problem or close call when the business needs a better understanding of how its systems are configured, who has access and where additional attention may be needed.
Even when everything appears to be working, an IT Baseline Assessment from SNL-Tech Services can help confirm what is already in good shape while identifying areas that may need improvement.
What Can Go Wrong Without a Clear IT Baseline?
A business can appear to be running normally while important technology and security gaps remain hidden. Those gaps often become visible only when something changes, fails or needs to be documented.
Some of the issues SNL-Tech Services may uncover during an IT Baseline Assessment include:
-
Backups are configured, but nobody knows when they were last tested or whether the business could actually restore important data.
-
Former employees, vendors or unused accounts still have access to company systems or information.
-
Microsoft 365, Google Workspace or other cloud services are using older security settings or lack important protections.
-
Devices are not consistently managed, encrypted, updated or protected.
-
Administrative accounts and ownership of important systems are unclear or poorly documented.
-
Cyber insurance applications may not accurately reflect the security controls that are actually in place.
-
A business may be asked for documentation during a compliance, insurance or customer review and discover that little has been formally documented.
-
There may be no documented incident response or recovery process for employees to follow when something goes wrong.
An IT Baseline Assessment from SNL-Tech Services helps identify and document these types of gaps before the business starts making larger technology, cybersecurity, insurance or compliance decisions.
What Does SNL-Tech Services Review During an IT Baseline Assessment?
Environment and Technology Review
-
Servers, computers and other business devices
-
Network infrastructure and internet connectivity
-
Business applications and software
-
Microsoft 365, Google Workspace and other cloud platforms
-
Mobile devices and their management status
Security Controls Review
-
Multifactor authentication
-
Endpoint protection
-
Device encryption
-
Firewall and network security
-
Email security and phishing protections
-
Device update and patching practices
-
Administrative and privileged accounts
Data Locations and Access Review
-
Where business data is stored
-
Who has access to company information
-
Shared accounts and access practices
-
Administrative access and account ownership
-
Remote access methods and controls
Documentation and IT Ownership Review
-
Existing IT documentation
-
Administrative account ownership
-
Domain, DNS and cloud service ownership
-
Vendor and technology relationships
-
Important subscriptions and licensing
-
Whether critical systems depend on one person or undocumented knowledge
Backup and Disaster Recovery Review
-
Current backup systems and procedures
-
Backup retention and storage locations
-
Whether restore procedures have been tested
-
Offsite and cloud backup protections
-
Existing recovery processes and documented recovery expectations
Compliance and Cyber Insurance Considerations
-
Technical safeguards that may relate to applicable business requirements
-
Security controls commonly requested on cyber insurance applications
-
Whether documented controls appear consistent with what is actually configured
-
Technical documentation or evidence that may be missing
-
Areas that may require additional review by an insurer, attorney, compliance professional or other appropriate adviser
What You Get From an IT Baseline Assessment From SNL-Tech Services
Written Assessment Report
A documented review of your current IT environment, including the systems reviewed, key findings, identified gaps and recommended next steps.
Executive Summary
A plain language overview for business owners and decision makers that explains what is working well, what needs attention and which issues should be addressed first.
Detailed Environment Inventory
Documentation of the hardware, software, cloud platforms, business applications, network infrastructure and other technology identified during the assessment.
Gap Analysis
A review of security, operational, documentation and technology gaps identified during the assessment, along with an explanation of why each finding matters to the business.
Prioritized Action Plan
A sequenced list of recommended improvements organized by priority so you can see what should be addressed first, what can be planned for later and where additional investigation may be needed.
Supporting Documentation and Evidence
Documentation that may help support cyber insurance applications, compliance related reviews, internal planning or conversations with your existing IT provider. The assessment does not certify compliance or guarantee insurance eligibility or coverage.
Review Call With SNL-Tech Services
A 30 minute consultation to walk through the findings, answer questions and discuss practical next steps.
I would also change “Evidence Package” to “Supporting Documentation and Evidence.” “Evidence Package” sounds a little like you are producing something formally accepted by an insurer or auditor, whereas this wording is safer and more accurate.
Pricing
$2,500. The final price is based on the size and complexity of the environment, number of locations, systems being reviewed and available documentation. Scope and pricing are confirmed before the assessment begins.
Timeline
Most IT Baseline Assessments are completed within 2 to 3 weeks after access and required information are available. Timing may vary based on the size and complexity of the environment, number of systems being reviewed and how quickly requested information can be provided.
Once the assessment is complete, you receive the written documentation and a 30 minute review call with SNL-Tech Services to walk through the findings and discuss next steps.
What Happens After an IT Baseline Assessment From SNL-Tech Services?
Once the assessment is complete, the documentation is yours to use in the way that best supports your business.
You can use it to:
-
Plan and prioritize your own technology improvements
-
Support cyber insurance preparation and renewal discussions
-
Use it as the foundation for a Managed IT engagement with SNL-Tech Services
-
Share the findings with another IT provider, consultant or internal decision maker
-
Use the documentation to support future technology, cybersecurity or compliance related planning
The assessment stands on its own. There is no requirement to hire SNL-Tech Services for remediation, ongoing support or Managed IT Services after the assessment is complete.
IT Baseline Assessment FAQs
What is the difference between an IT Baseline Assessment and ongoing Managed IT Services?
An IT Baseline Assessment is a standalone review of your current technology environment. SNL-Tech Services documents what is in place, identifies important gaps and provides a prioritized action plan. Managed IT Services are ongoing and may include monitoring, support, maintenance, security management and continued technology planning.
You do not need to become a Managed IT client to purchase an IT Baseline Assessment.
Do I need to already have an IT provider?
No. SNL-Tech Services can perform an IT Baseline Assessment whether you currently manage technology internally, use another IT provider or do not have formal IT support.
If you already work with an IT provider, the assessment can also give you an independent view of your environment and documentation you can use when discussing improvements with them.
Will SNL-Tech Services need administrative access to my systems?
Some level of access is typically needed to properly review the systems included in the assessment. The exact access required depends on your environment and may include Microsoft 365, Google Workspace, network equipment, servers, backup systems, security platforms or other business technology.
SNL-Tech Services will identify what access or information is needed before the assessment begins.
Does an IT Baseline Assessment certify that my business is secure or compliant?
No. An IT Baseline Assessment helps identify and document technical controls, gaps and areas that may require attention. It does not certify that a business is completely secure or legally compliant.
If your business has specific regulatory, contractual or legal requirements, findings from the assessment can help support conversations with the appropriate compliance, insurance or legal professionals.
Can I use the assessment for cyber insurance?
The documentation may help you better understand the technical controls currently in place when preparing for a cyber insurance application or renewal.
SNL-Tech Services does not determine insurance eligibility, coverage, premiums or claim decisions. Those decisions remain with your insurance carrier, broker or other insurance professional.
What if the assessment finds serious problems?
The report will explain the findings and organize recommended improvements by priority. Some issues may need immediate attention, while others can be planned over time.
You can address the recommendations internally, work with your existing IT provider or ask SNL-Tech Services to help with remediation. There is no requirement to hire SNL-Tech Services for the work identified in the assessment.
Will everything found during the assessment need to be fixed immediately?
No. Part of the purpose of the assessment is to help separate urgent concerns from longer term improvements.
The prioritized action plan helps you understand what should receive attention first, what can be scheduled later and where additional investigation may be appropriate.
How long does an IT Baseline Assessment take?
Most assessments are completed within approximately two to three weeks after the required access and information are available. Timing can vary depending on the size and complexity of the environment, the number of systems involved and how quickly requested information can be provided.
What happens after the assessment is complete?
You receive your assessment documentation, findings and prioritized action plan, followed by a review with SNL-Tech Services to discuss the results and answer questions.
The documentation belongs to your business and can be used for internal planning, cybersecurity improvements, cyber insurance preparation, compliance related work, conversations with another IT provider or as the foundation for future work with SNL-Tech Services.