CIS benchmark security audit for financial and regulated companies

Payment institutions, e-money institutions, crypto-asset service providers and NIS2 “important entities” have to show the regulator that their IT environment is under control. If the company runs on Google Workspace or Microsoft 365, that environment is a critical ICT service, and almost nobody has a document proving it is configured correctly. We produce that document.

What you get

  • Assessment against the CIS Google Workspace or Microsoft 365 Foundations Benchmark – every control with status, evidence (screenshot or export) and recommendation.
  • Mapping to DORA, NIS2 and ISO 27001 requirements, so your compliance officer can file the document without rewriting it.
  • Prioritised remediation plan – what must be done before the licence application or audit, what can wait.
  • Optionally, hardening: two-step verification for all, conditional access, data loss prevention (DLP), retention policies (Vault), admin role separation, app access control, log export.
  • Re-assessment quarterly or annually with a refreshed evidence pack.

What it is not

It is not a penetration test and not a compliance certificate. We assess configuration against a recognised standard and provide evidence; the conclusion on compliance is made by your compliance function and the regulator.

Why FreeIT

  • Google Cloud partner since 2011; the founder has been a Google certified deployment specialist since 2012 (certificate no. 849).
  • Experience with regulated clients in Latvia and abroad (a financial company with offices in three countries under FCMC supervision).
  • The founder has a legal and MBA background and 20 years of telecom IT leadership, so we can talk to the compliance officer and the system administrator in the same meeting.

Price

  • Assessment of one tenant up to 50 users – typically €5,000-10,000 depending on user count, edition and documentation scope; fixed price after a short scoping call.
  • Hardening – fixed quote after the assessment.
  • Re-assessment – from €600 per run.

All prices exclude VAT. Consulting rate for regulated clients: €125 per hour.

Let’s talk about your setup

A free consultation with a certified Google Cloud specialist. No sales scripts, we’ll tell you if Google Workspace isn’t right for you.

Get in touch →  ·  +371 22 30 50 90