If one account or system is compromised,
how far could an attacker get?
I’ll work through your IT estate with you and help identify where a compromised account or system could give an attacker access to other parts of your organisation.
Together, we’ll agree where stronger boundaries and access controls are needed, and create a prioritised plan your team or IT provider can implement.
Indicative price: £3,000 + VAT where applicable.
Scope and fee agreed before payment.
Discuss your defence-in-depth review
Tell me a little about your organisation and what you want to understand or improve. I’ll reply to clarify the scope and next steps.
Useful starting points:
• The main systems, cloud platforms and locations involved.
• Whether IT is managed internally, by an MSP, or both.
• Any particular concerns about administrator access, supplier access, separation or recovery.
Before you send
Please don’t include passwords, credentials, or other sensitive information in an initial enquiry. If we need to share anything sensitive, we’ll agree a secure way to do it.
Make a compromise harder to spread
An employee account, a supplier connection or an internet-facing service can provide access to more than you intended. This review examines how your systems connect, who can access them and where separation would help contain a compromise.
-
Included
Understand the routes through your estate
Review the relationships between identities, devices, networks, cloud services and supplier access using the information available. Record assumptions and gaps that need further investigation.
-
Included
Agree your trust boundaries
Identify where access should be restricted or separated, including privileged accounts, critical systems, backups and third-party connections.
-
Included
Build a practical improvement plan
Receive prioritised recommendations explaining what to change, why it matters and who should take responsibility. Distinguish immediate actions from improvements that need more planning.
-
Included
Work through it together
Discuss the findings with Ben, ask questions and agree practical next steps with your team or IT provider. The number and length of sessions are agreed during scoping.
Indicative price: £3,000 + VAT where applicable. Scope, deliverables, timetable and final fee are agreed before payment.
Discuss my reviewHow it works
We agree the boundaries of the review before work begins, then work through the evidence and recommendations together.
This is a collaborative consultancy engagement. I’ll work through your IT estate with you and, where appropriate, your IT provider. The review assumes an account or system could be compromised and focuses on limiting access and impact.
If you have already completed Ronin’s asset inventory, we can use that as a starting point. It is not a prerequisite, and additional information about your internal estate will normally be needed.
- Confirm scope — discuss your organisation, the systems involved, your priorities and the people who need to participate.
- Share the available information — provide relevant inventories, diagrams and configuration information through an agreed secure route. Incomplete records are fine; gaps are recorded.
- Review access and separation — examine how identities, systems and providers connect, and where a compromise could spread.
- Agree the improvement plan — work through the recommendations, responsibilities and next steps so your team knows how to proceed.
About Ben
I lead Ronin, an independent cybersecurity consultancy.
With over ten years in the sector, including time as a consultant at NCC Group, I work closely with small teams, leaders and their IT providers to ensure clear and practical communication.
My focus is reviewing discovery findings, clarifying what the evidence indicates, and supporting informed decisions on priorities. If you have an MSP, I can collaborate with them to confirm ownership and follow through on recommendations.
Questions,
answered plainly
Common questions about Ronin’s Defence-in-Depth Review.
What is a trust boundary?
A point where access should be controlled between systems, users or environments with different levels of trust. Examples include separating everyday accounts from administrator access, or keeping backup administration separate from the systems being backed up.
Is this a penetration test?
No. This is an evidence-led review of your architecture, access arrangements and security controls. It does not include attempts to exploit systems. Penetration testing can be scoped separately to test how controls hold up.
Will you make the changes for us?
This engagement provides guidance and an agreed improvement plan. Your team or provider implements it. If you want Ronin to carry out changes, we can scope a separate implementation project.
What information will you need?
Usually an asset inventory, available network or cloud diagrams, an overview of identity and administrator access, supplier access arrangements, and information about backups and recovery. We agree the appropriate evidence during scoping and arrange secure sharing.
Do we need to buy the asset inventory first?
No. We can work from your existing records. If the information available is insufficient, we’ll discuss what discovery is needed before agreeing the review.
Can our IT provider take part?
Yes. Their knowledge can help establish how the estate works and make the recommendations practical to implement.
Is the price fixed at £3,000?
£3,000 plus VAT where applicable is an indicative price. The final fee depends on the agreed scope and complexity. You receive confirmation of the scope, deliverables, timetable and price before payment.
What happens afterwards?
You can implement the plan with your own team or provider. Ronin can also offer separately scoped implementation support, penetration testing and ongoing security advice. There is no obligation to buy further services.