IT audit in plain words: find out what is wrong before it costs you

Yes, that is the point of the whole service. The report is written for a business owner, not an engineer. Each finding is described in plain words: what the risk is, why it matters to your business, and roughly what it would cost to fix. Risks are ranked by danger and cost, so you can see at a glance what deserves attention first. There is no jargon to decode and no long appendix of raw technical data. If anything in the document is still unclear, ask us and we will explain it again, in person and in plain language.

For a small office the price starts at 200 EUR. The figure is always fixed and quoted up front: we look at how many computers, sites and systems you have, name a fee, and only then begin. You are never billed for open-ended hours, and the amount does not grow while the work is in progress. Larger companies are quoted individually, still as a fixed fee agreed in advance. All prices are net, without VAT. If you want an exact number for your company, write to us with a rough count of your computers and locations and you will get a quote before committing to anything.

No, and this is a deliberate part of how the audit is designed. Most of the checking runs quietly in the background over a few days, so your staff keep working as usual and most of them will not even notice it is happening. On-site visits are needed for some checks, but they are short and scheduled around your working hours, not ours. Nothing is switched off or restarted without agreeing it with you first. If your business has hours that are especially sensitive, for example when tills or production must not be touched, tell us in advance and we plan around them.

Yes, a NIS2 readiness check is part of every audit, at no extra charge and regardless of company size. We look at whether the NIS2 law applies to your company at all, and if it does, where you already comply, what is missing, and what to do about the gaps. You get this in the same plain-language report as the rest of the findings, so you can see compliance work next to your other risks and plan it in a sensible order. Since NIS2 duties now carry real fines, the point is that you learn where you stand before a regulator or an incident tells you.

No, there is no obligation of any kind. The report belongs to you, and you decide what happens next: fix the findings with your own IT people, hand the document to another contractor, or do part of the work internally and part with us. We deliberately write the report so that any competent specialist can act on it, which is also why there is no lock-in to our services. If you do want help, we can fix the findings ourselves or take over your day-to-day IT afterwards, and that work is quoted separately, so the audit stays an independent, honest assessment.

The audit covers everything that could stop your business or leak your data. We check how your network is wired and where it is open from outside, whether your files and backups would survive a disk failure, ransomware or a stolen laptop, who can reach your systems through passwords, access rights and remote logins, and the age and health of your servers, computers and network gear. NIS2 compliance is reviewed as part of the same work. The result is a short report with every risk ranked by danger and cost, in a clear order of what to fix first, from 200 EUR as a fixed fee.

For a typical small company the whole audit takes a few days from start to finish. The exact length depends on how many computers, sites and systems you have, so we tell you the expected timeline together with the fixed price before the work begins. Most of that time the checks run in the background while your team works normally, and the on-site part is a matter of short, scheduled visits. Writing the report is included in the same timeframe, so at the end of those days you are holding the finished document with the risks and the action plan, not waiting weeks for paperwork.

Our anonymised examples give a realistic range. An 8-person dental clinic paid 490 EUR one-off, a retail chain with 4 shops paid 900 EUR, and a 25-person manufacturing plant paid 1200 EUR. The differences come from size and complexity: more computers, more locations and more systems mean more to check. Whatever the size, the pattern is the same: a single fixed fee agreed before starting, net of VAT, that does not change during the work. These cases are published with the clients' permission and without company names, so you can compare your own business against a similar one before asking us for a quote.