Security Gap Analysis for Charlotte Businesses
in Charlotte, North Carolina

How much does the gap analysis cost?

For existing managed clients, it's included — we run it as part of ongoing security governance. For businesses evaluating Netsafe as a managed services partner, it's included in the onboarding evaluation process. For standalone engagements (one-time posture baseline without a managed services commitment), it's a fixed-fee project quoted in writing after a discovery call.

How long does the assessment take?

Typical timeline is 5-7 business days from discovery call to written report, assuming we get read-only access to your systems in 1-2 days after the call. Larger or more complex environments may take 10 business days.

Do you need admin access to our Microsoft 365 tenant?

We need read-only delegated admin access (GDAP with read scopes only), which lets us pull configuration, policies, audit logs, and Secure Score data without modifying anything. Access is time-limited (typically 10 days) and revoked at engagement end. If your team is not comfortable granting GDAP access, we can walk through an alternative where your internal IT runs specific PowerShell queries and sends us the output.

What happens after the report is delivered?

A 60-minute review meeting with your leadership and IT contact, walking through findings and the prioritized remediation roadmap. After that, it's your report to use however you want. If you want Netsafe to help close gaps, we quote specific work; if you want to engage a different provider or tackle it with internal resources, that's completely fine.

Can the report be shared with our insurance carrier or auditor?

Yes. The report is yours to share. Several clients have shared the Netsafe gap analysis with cyber insurance underwriters during renewal, and it's helped position them for better pricing. For SOC 2 or HIPAA audits, the report provides gap-closure evidence auditors can reference — it doesn't replace the audit itself, but it's useful preparation.

What industries do you typically work with?

Healthcare practices, law firms, financial services (RIAs, wealth managers, broker-dealers), manufacturers, engineering firms, dental offices, nonprofits, and other Charlotte-area SMBs from 10 to 500 employees. The framework is the same; the specific controls we evaluate vary based on your compliance obligations.

What if we don't have Netsafe's tools deployed yet?

The automated assessment pulls data from our managed stack — NinjaOne, SentinelOne, M365 via GDAP, Pax8, and QuickBooks. If you're evaluating Netsafe as a new managed services partner, we deploy read-only access to these systems as part of the onboarding evaluation so we can run the full assessment. For businesses that want a posture baseline without deploying our tools, we offer a lighter manual assessment as a standalone project engagement — it covers the same 10 domains but uses configuration exports and interviews rather than live telemetry.

How is this different from a Microsoft Secure Score check?

Microsoft Secure Score evaluates your M365 tenant against Microsoft's own baseline. That's one of the data sources we use, but it's limited to M365. Our gap analysis covers 10 domains including endpoints, backup, network, compliance, SaaS, incident response, and governance — things Secure Score doesn't touch. Secure Score is a useful starting point; our analysis is a complete picture.

What about customer data protection during the assessment?

All collected data stays within our secure infrastructure (Azure Container Apps with Key Vault-stored secrets, audit-logged access). Read-only access tokens are stored encrypted and revoked at engagement end. We do not share any client data with third parties. The assessment process is covered by a mutual NDA before any access is granted.

---