Audits, risk and standards

See the gaps before they become incidents.

Practical assessments that show what is working, what is exposed and what should be improved first—supported by clear evidence and prioritised actions.

IT ENVIRONMENT

IT Site Audit

Review the organisation's physical and technical environment, including devices, users, networks, systems and operational controls.

  • Hardware and software inventory
  • Network topology and connectivity
  • Patch, antivirus and endpoint posture
  • Backups, recovery and business continuity
  • Findings report with risk ratings
WEB PRESENCE

Website Audit

Assess whether a business website is fast, secure, mobile-friendly, accessible and ready to convert visitors into enquiries.

  • Performance and mobile responsiveness
  • SSL/TLS and security-header checks
  • Broken links, forms and content gaps
  • SEO fundamentals and accessibility review
  • Prioritised improvement plan
IDENTITY & ACCESS

Active Directory Review

Identify weaknesses in identity, access, privileged accounts and core Windows domain configuration.

  • Privileged groups and administrator review
  • Inactive, stale and risky accounts
  • Password and lockout policy review
  • Group Policy and organisational-unit review
  • DNS, time, backup and recovery readiness
CYBERSECURITY

Cybersecurity Assessment

Evaluate essential protective controls and create a practical roadmap to reduce business risk.

  • Access control and MFA readiness
  • Endpoint and email-security review
  • Logging, monitoring and incident readiness
  • Vulnerability and configuration observations
  • Risk register and remediation roadmap

ISO-aligned services

Prepare for stronger governance and future certification.

Ngobeni Technologies can help organisations understand requirements, identify gaps, organise evidence and build corrective-action plans. Certification itself must be performed by an accredited, independent certification body.

ISO/IEC 27001:2022 Information Security Management System readiness and gap assessment.
ISO/IEC 27002:2022 Information-security control review and implementation guidance.
ISO/IEC 20000-1:2018 IT service-management system readiness and process-gap review.
ISO 19011:2018 Audit-programme and management-system audit guidance.
Executive summary Evidence-based findings Risk ratings Prioritised remediation plan Policy and evidence support