Municipal · Pine Cove security assessment
Find out what it would actually score
Nineteen questions, about thirty minutes, with Pine Cove's security team. Built on Pathfinder 360. You get a score, the gaps behind it, and a roadmap written for the people who have to approve the fix.
Start the conversationMost public sector environments have a firewall, endpoint protection, a backup, and a reasonable assumption that all of it is configured correctly. The assumption is usually the weakest part. Not because anyone was careless: new releases come out every month, people change roles, vendors come and go. Change is the norm, and keeping up with it is a time problem. A security assessment replaces the assumption with a number, and shows you the ranked gaps behind it.
- 19 questions, about 30 minutes, on the fundamentals
- A number, not a verdict, and you can compare it next year
- Pine Cove's own security team, not a subcontractor
- Free through October
Where this sits
Security is one of eight
Pathfinder 360 is our own framework and it covers eight domains of an IT ecosystem. A security assessment is that one domain, run on its own, using the same scoring. It is not a Pathfinder 360 score, and we will not describe it as one. Your report shows all eight domains, so you can see what a full assessment would cover.
- Organizational Objectives
- Collaboration and Productivity
- Applications
- Cloud and Application Delivery
- Devices
- Infrastructure
- Security
- Support
This offer is the highlighted domain, scored on its own.
What we ask about
Nineteen questions, six areas
The assessment is a conversation, not a scan. Pine Cove's security team works through 19 questions with you, grouped into six areas.
Identity and access
5 questionsMFA, account and permission reviews, privileged credentials, admin rights, password policy.
Endpoints
3 questionsAntivirus, managed detection and response, device encryption.
Threat protection and monitoring
3 questionsVulnerability scans, email and web filtering, log monitoring.
Policy and readiness
4 questionsIncident response plan, cyber insurance, written security policies, an industry-standard set of controls.
People
2 questionsSecurity awareness training, phishing and tabletop exercises.
Physical security
2 questionsAccess control and video monitoring.
Physical security is part of it, because a door anyone can open is a security gap too.
How it is scored
Every answer gets one of four ratings
- At risk
- Needs attention
- Satisfactory
- Not applicable
Those ratings are what your score is built from, and why you can compare it next year.
Before you book
Three questions to ask yourself first
- 01Is MFA on every staff, admin and cloud account, not just email?
- 02Do you have an incident response plan that has been tested, with named roles?
- 03Are privileged passwords kept in a vault, or in someone's head?
If any of those took more than a second, the other 16 are worth 30 minutes.
Start the conversationWhat comes back
The page you end up holding
Four parts. This is the shape of the document, not a filled-in sample.
- 01
One number, and a date against it
A score you can put next to next year’s, and next to a number, which is the form a council funds things in. You will also see how it compares with similar organizations we have assessed.
- 02
The ranked gaps behind it
Each one with what it exposes and what closing it would actually involve. Ranked by what we would address first, not by what scores worst.
- 03
A remedy line that declares its interest
Every remedy marked with whether Pine Cove would be bidding on it. We build the roadmap with you: you get the insight, and you decide what to use and who with.
- 04
No price on the page
The assessment is free, and the report does not carry a quote. If you want help closing any of the gaps, that is a separate conversation.
Replace the assumption with a number.
Tell us what you have today and we will come back to set up your free assessment.
Pine Cove Consulting has served municipalities across Montana and the Mountain West from Bozeman since 1993.