Question 1

What is a cyber security risk assessment?

Accepted Answer

A cyber security risk assessment is a structured review of your business's IT infrastructure, security controls, and processes to identify vulnerabilities, evaluate threats, and quantify risk. The output is a risk register and remediation roadmap that helps you prioritise security investment. For London SMEs, a risk assessment typically covers: network and firewall configuration, endpoint security, Microsoft 365 / cloud security, patching status, access controls, backup resilience, and staff awareness.

Question 2

How much does a cyber security risk assessment cost in London?

Accepted Answer

Coreitech's cyber security risk assessment starts from £1,500 for SMEs (up to 50 users). Enterprise assessments for larger organisations or regulated sectors (financial services, healthcare, legal) are priced on scope. The assessment is often offset against the cost of our managed cyber security service if you proceed with remediation. Call 0203 834 9728 for a fixed-price quote.

Question 3

How long does a cyber security risk assessment take?

Accepted Answer

For most London SMEs (10–100 users), the technical discovery phase takes 1–2 days (remote + on-site). The report and roadmap are delivered within 5 business days of the discovery phase completing. Larger or more complex environments may require additional scoping time.

Question 4

Is a cyber security risk assessment the same as a penetration test?

Accepted Answer

No — they're complementary but different. A risk assessment identifies and prioritises vulnerabilities across your entire security posture (policies, configuration, controls, processes). A penetration test actively attempts to exploit specific vulnerabilities to confirm they're exploitable. Most businesses benefit from a risk assessment first, then targeted pen testing to validate the highest-risk findings.

Question 5

Do you provide cyber security risk assessments for regulated sectors?

Accepted Answer

Yes. Coreitech provides cyber security risk assessments for financial services (FCA-regulated firms, IFAs, insurance brokers), legal (SRA-regulated law firms), healthcare (NHS supplier requirements, CQC-registered providers), and professional services. We map findings to sector-specific frameworks (FCA SYSC, ISO 27001, Cyber Essentials) and provide documented evidence for compliance purposes.

CYBER SECURITY
RISK ASSESSMENT
LONDON

How a cyber security risk assessment works

Scoping call

Technical discovery

Risk analysis

Report & roadmap

Remediation support

Cyber security risk assessment — FAQ

Book your cyber security risk assessment

CYBER SECURITYRISK ASSESSMENTLONDON