Cybersecurity and IT Audit

Security testing, IT audits and ISO 27001. Start each job from a ready-made project with its milestones, tasks and client documents already in place.

Templates: 3
Milestones: 7
Tasks and sub-tasks: 18
Documents to collect: 5

Look inside the templates

These are the projects a new firm gets on day one. Pick one to see how the work and the fee are laid out.

Managed IT services (monthly)

A month of IT support for an office: helpdesk, devices, backups, security patches and a service report.

Retainer
30 days
1 milestone
5 tasks
0 documents

Billed as a retainer, so these milestones track the work rather than the fee.

Milestones and tasks

Day 30Monthly service report
- Helpdesk ticketsSupport Engineer
- Patch servers and laptopsSupport Engineer
- Check backups and test a restoreSupport Engineer
- Review licences, joiners and leaversSupport Engineer
- Service report and recommendationsManager

Document checklist

No documents listed. Add your own.

Security assessment (VAPT)

Vulnerability assessment and penetration test of applications or networks, with a report and a re-test.

Fixed price
30 days
2 milestones
6 tasks
2 documents

Milestones and tasks

Day 15Testing complete60% of the fee
- Scope, rules of engagement and authorisationManager
- Vulnerability scanningSecurity Analyst
- Manual penetration testingSecurity Analyst
- Report with risk ratings and fixesSecurity Analyst
Day 30Re-test and closure report40% of the fee
- Re-test after the client's fixesSecurity Analyst
- Closure reportManager

Document checklist

Signed authorisation to testFrom the client · day 2 · compulsory
Test accounts and IP addresses in scopeFrom the client · day 2 · compulsory

ISO 27001 implementation

Building an information security management system and preparing for ISO/IEC 27001 certification.

Fixed price
120 days
4 milestones
7 tasks
3 documents

Milestones and tasks

Day 15Gap assessment25% of the fee
- Scope and gap assessmentConsultant
Day 75Policies and controls in place35% of the fee
- Risk assessment and treatment planConsultant
- Statement of applicability and policiesConsultant
- Implement controls and awareness trainingConsultant
Day 95Internal audit and management review20% of the fee
- Internal auditAuditor
- Management reviewConsultant
Day 120Certification audit20% of the fee
- Support stage 1 and stage 2 auditsConsultant

Document checklist

Signed proposalFrom the client · day 0 · compulsory
Approved information security policyFrom the client · day 60 · compulsory
Certification body contractFrom the client · day 90 · compulsory

Templates are starting points, not professional advice. Rules and due dates change, so check them against your own practice. They're yours to edit.

Example

How a firm like yours could run it

A firm like this

Six security analysts deliver VAPT engagements, IT audits and ISO 27001 implementations.

A typical month

Each assessment starts with scope and authorisation on the checklist; testing can't start until they're in. Critical findings are reported straight away. After the report, the client has an agreed window to fix, then the re-test and closure report. Access details come through the portal, not email.

Where the work gets hard

Testing sometimes started before written authorisation arrived.
Re-tests weren't scoped and dragged on.
Access details were shared over email.

What MSMEPulse gives you

No testing without authorisation on record.
Re-tests are scoped and time-boxed.
Sensitive access details stay out of email.

Read the full example

What happens when you start a project

Real dates and amounts

Enter the start date and contract value, and preview every milestone before anything is created.

Real people

Roles like Manager or Junior are filled with your team when the project starts.

Documents chased

A milestone can't be closed while a compulsory document is missing, unless a manager overrides it with a reason.

Your way of working

Edit any template, or save a finished project as a new one.

Guides for this industry

Related industries

Start with these projects already set up

Choose Cybersecurity and IT Audit when you sign up and its templates are in your library straight away.