Cybersecurity Risk Assessment

Identify Exposed Assets, Security Risks & Attack Surface Exposure

External attack surface discovery, security assessments, risk prioritisation, penetration testing and continuous monitoring delivered by IT ServiSource.

87
External Risk Score

Critical

12

High

24

Domains

31

Assets

142
Administrative Portal Exposure
SSL Configuration Weakness
DNS Misconfiguration
Email Security Review

POPIA Aligned

Risk identification aligned to compliance requirements

Executive Reporting

Leadership-focused risk visibility and reporting

Continuous Monitoring

Ongoing visibility into exposure and risk changes

No Internal Access Required

External assessment without impacting operations

What We Do

Identify externally exposed systems, services and configurations that increase cybersecurity risk.

🌐

Internet-Facing Domain Discovery

Discover internet-facing domains, services and publicly visible assets.

🔐

Administrative Portal Exposure

Identify publicly exposed administrative interfaces and portals.

Exposed Port Identification

Detect accessible services, open ports and externally reachable systems.

🌍

DNS & Domain Exposure

Review DNS records, domain exposure and configuration weaknesses.

🛡️

SSL/TLS Review

Assess encryption posture, certificate configuration and security standards.

📧

Email Security Analysis

Review SPF, DKIM and DMARC configurations.

Assessment Includes

A comprehensive external cybersecurity assessment focused on identifying exposed assets, attack surface risks and security weaknesses.

External Attack Surface Discovery
Open Port Identification
Email Security Configuration Review
Technology Fingerprinting
Subdomain Enumeration
SSL/TLS Configuration Review
DNS & Domain Exposure Analysis
Risk Scoring & Prioritisation

External Risk Overview

ACTIVE

87

Risk Score

Critical

12

High

24

Medium

37

Low

56

Assessment Service Tiers

Choose the level of assessment appropriate for your organisation's security maturity and risk exposure.

TIER 1

Baseline Exposure Scan

External visibility assessment designed to identify exposed services and internet-facing risks.

  • External Domain Discovery
  • Subdomain Enumeration
  • Open Port Identification
  • SSL Configuration Review
  • Email Security Review
  • Executive Summary Report
TIER 2

Security Assessment

Comprehensive external attack surface review with technical findings and remediation guidance.

  • Full Attack Surface Discovery
  • Vulnerability Identification
  • Exposed Service Analysis
  • Technical Findings Report
  • Risk Scoring
  • Remediation Recommendations
TIER 4

Penetration Testing

Manual validation of findings through controlled security testing and exploitation assessment.

  • Manual Validation
  • Authentication Testing
  • Privilege Escalation Testing
  • Exploitability Assessment
  • Attack Simulation
  • Penetration Testing Report
TIER 5

Continuous Monitoring

Ongoing visibility into changes, exposure growth and risk trends.

  • Monthly Monitoring
  • Change Detection
  • Risk Trend Reporting
  • Quarterly Executive Reports
  • Security Posture Tracking
  • Continuous Visibility

Why Organisations Choose IT ServiSource

No Internal Access Required

All testing is performed externally without requiring access to internal systems.

No Disruption To Operations

Safe and non-intrusive testing designed to avoid operational impact.

Executive-Level Reporting

Clear reporting suitable for management and leadership review.

POPIA-Aligned Risk Identification

Security findings mapped to compliance and governance considerations.

Actionable Guidance

Practical recommendations designed to reduce risk quickly.

Clear Prioritisation

Risks ranked by severity and business impact.

Assessment Deliverables

Executive Summary Report
Overall Risk Rating
Technical Findings Report
Prioritised Recommendations
Identified Exposed Assets
Security Improvement Roadmap
Risk Severity Classification
Remediation Guidance

Optional Monitoring Services

Extend visibility beyond the assessment through continuous monitoring, reporting and exposure tracking.

☁️

Microsoft 365 Security Monitoring

Continuous visibility into Microsoft 365 security posture and configuration risk.

  • Secure Configuration Monitoring
  • Conditional Access Review
  • Risky Sign-In Detection
  • Privileged Account Monitoring
  • MFA Posture Review
  • Monthly Security Report
💻

Endpoint Security Monitoring

Monitor endpoint security posture, compliance and exposure indicators.

  • Endpoint Health Monitoring
  • Device Exposure Detection
  • Compliance Tracking
  • Antivirus Status Monitoring
  • Security Configuration Review
  • Monthly Endpoint Report
🔄

Patch Compliance Monitoring

Track operating system patch levels and vulnerability exposure.

  • Missing Patch Detection
  • OS Compliance Tracking
  • Vulnerability Monitoring
  • Patch Compliance Scoring
  • Update Visibility
  • Monthly Compliance Reporting
🔍

Dark Web Exposure Monitoring

Identify exposed credentials, leaked accounts and breach indicators.

  • Email Breach Monitoring
  • Credential Exposure Detection
  • Password Leak Alerts
  • Domain Monitoring
  • Exposure Tracking
  • Monthly Exposure Summary
READY TO UNDERSTAND YOUR RISK?

Identify Security Risks Before They Become Business Risks

Gain visibility into exposed assets, internet-facing services, security weaknesses and attack surface risks through a structured cybersecurity assessment.