Security & Compliance

IT Security Audit: Clarity on Your Security Status

We'll assess your Google Workspace, Microsoft 365, or hybrid environment and identify which risks you should address first.

Liam Ormond, Senior Cloud Consultant, discusses results on the screen with a colleague
Leading companies rely on solutions from StackWorks AG
Quick Check

How secure is your IT today?

Five questions, one minute. You'll see right away where you stand—no forms and no registration required.

1Is two-factor authentication enabled for all accounts?
2Do only a few people have administrator privileges?
3Are all devices managed and encrypted centrally?
4Do you know which files are shared externally?
5Would you notice a suspicious login within a day?
Your result
Still pending

Answer the five questions, and the result will appear here.

Discuss the results
Your Added Value

How the Audit Benefits You

An audit is worthwhile if it makes decision-making easier. That is what our report is designed to do.

Request a Security Audit
01

Prioritize Critical Risks

You'll identify which vulnerabilities are actually putting your data, user accounts, and business processes at risk—and which ones should be addressed first.

02

Meet the requirements

The audit documents relevant security controls and provides a solid foundation for meeting customer requirements, internal guidelines, and regulatory compliance.

03

Use Your Budget Wisely

You can see which measures provide the greatest security benefits, which features are already in place, and where additional investments make sense.

04

An independent outside perspective

An external audit reveals blind spots that are overlooked internally over time. You receive an objective assessment.

The Difference

From Conjecture to Certainty

Today
They suspect that the settings are correct.
Customer inquiries about security take days to resolve.
The budget goes toward tools you already own.
An incident is only noticed when it has consequences.
After the audit
You know where your surroundings are protected.
A report provides answers to evidence at a glance.
Existing functions are used first.
Monitoring flags anomalies early on.
Documents

Proven experience

300+
Swiss companies as customers
2013
has been working with small and medium-sized enterprises since this year
ISO 9001 certified by Swiss Safety CenterISO/IEC 27001 certified by Swiss Safety Center
9001 and 27001 for Quality and Information Security
Google Workspace Premier Partner, Sales and Service
Google Workspace Premier Partner

Security in accordance with international standards

Our ISO 27001 certification confirms that we not only provide consulting on information security but also implement it in accordance with recognized standards.

Audit Expertise for Google Workspace and Microsoft 365

Whether it's Google Workspace or Microsoft 365: We have in-depth knowledge of the security features of both platforms and assess your environment on a platform-specific basis rather than using a generic checklist.

Proven Audit Methodology

Our experience from numerous audits of Swiss SMEs helps us assess risks more quickly and provide practical recommendations.

StackWorks understood our needs. Their staff is knowledgeable. In addition, our collaboration with them has proven to be very pragmatic and transparent. We really appreciate that.

MS
Moritz Schneider
Moritz Schneider
CEO, Mediaschneider AG & Hoy AG
View Case Studies
Scope of the Audit

What We Check at Your Company

Google Workspace and Microsoft 365 differ in their security features and permission models. That is why we tailor the scope of our audit to the platform you use and, in hybrid environments, also take into account the interaction between cloud services, identities, devices, and on-premises infrastructure.

  1. 01Identities and AccessAre user accounts and privileged access sufficiently protected?Admin roles, two-step verification, and context-based access
  2. 02Cloud Services and ApplicationsAre all roles and permissions defined in a way that allows you to work as securely as possible?Gmail, Drive, Third-Party Apps, and Roles
  3. 03Data and CommunicationAre corporate data and collaboration sufficiently protected?Shared folders, external sharing, SPF, DKIM, and DMARC
  4. 04Devices and EndpointsAre all devices centrally protected and managed?Endpoint Management for Computers and Mobile Devices
  5. 05Monitoring and RecoveryCan security incidents be detected and traced?Audit logs, alerts, and recovery
Google Workspace
ResultReport with traffic light system and roadmap
ProcedureKick-off, Analysis, Meeting
ScopeFive test areas
Request an Audit
Audit Report
Security Situation at a Glance
Identity and Access
Email Security
Approvals and Data
Devices and Endpoints
Logging
3 Priority Actions

Sample illustration

Your Audit Report

A clear picture instead of a long list of defects

A traffic-light system shows at a glance where your area is well protected, where action is needed, and which measures take priority.

  • Easy-to-Understand Risk Assessment
  • Prioritizing All Findings
  • Specific Recommendations for Action
  • A Practical Roadmap for the Next Steps
Procedure

A Four-Step Guide to Creating a Security Roadmap

The first step is a one-on-one meeting. After that, you can take your time to decide.

1

Initial consultation

We'll contact you with a suggested date and discuss the context, scope, and objectives. After that, you'll receive a clear quote.

Liam Ormond, Senior Cloud Consultant at StackWorks
Liam Ormond
Senior Cloud Consultant
2

Define Objectives and Scope of Testing

During the kick-off meeting, we'll assess your IT environment, business-critical processes, and requirements, and determine which systems are the focus.

3

Analyze Risks and Configurations

We examine systems, accesses, and settings in detail and document the results in a structured manner.

4

Discuss the report and recommendations

You will receive the audit report, which includes a risk assessment and prioritized actions. We will review it together and determine the next steps.

Ready to get a clear picture of your IT security?

Schedule an Initial Consultation

Security in accordance with international standards

Our ISO 27001 certification confirms that we not only provide consulting on information security but also implement it in accordance with recognized standards.

Audit Expertise for Microsoft 365 and Google Workspace

Whether it's Google Workspace or Microsoft 365: We have in-depth knowledge of the security features of both platforms and assess your environment on a platform-specific basis rather than using a generic checklist.

Proven Audit Methodology

Our experience from numerous audits of Swiss SMEs helps us assess risks more quickly and provide practical recommendations.

Ishan Don, laughing with his arms crossed, in front of a blue semicircle

Security requires priorities.

Ishan Don
Founder & Managing Director
FAQ

Frequently asked questions and answers

No, our cloud specialists will guide you safely through the process and ask the right questions in a targeted manner so that you have minimal effort.

First and foremost, it is about your goals, your wishes and requirements. The more clearly you communicate these to us, the better we can tailor the solution for you.

Our audit is an examination of the situation at a specific point in time. This situation can change as a result of IT measures and updates. We will be happy to advise you individually on how often a security audit is required and to what extent.

A smiling man wearing a headset is working at a computer in an office, with a laptop in front of him
Ishan Don
Founder & Managing Director

Do you have a question?