What the free assessment includes, and what it deliberately does not, is written for the cybersecurity practice: what a free security assessment actually covers. If you want that conversation from the Lincoln team, start at cybersecurity services in Lincoln. This page is the control list, not the Lincoln service page.
People ask for an assessment when a carrier, a board, or a bad week forced the issue. What they often buy is a PDF. What they need is a gap list tied to controls they can operate.
What SAINT reviews
- Identity: MFA coverage, admin roles, stale accounts, Entra / Google.
- Email: forwarding, DMARC progress, phishing controls — email security.
- Endpoints: Huntress (or equivalent) EDR actually installed, patch windows, unsupported OS.
- Backup: exists, offline/immutable enough, restore tested — not “OneDrive is our DR.”
- Perimeter & network: VPN exposure, guest Wi-Fi, flat VLANs.
- Physical (when in scope): doors and cameras as access-control evidence — facility assessment.
We map to NIST CSF language and to the questionnaire in front of you (cyber insurance, HIPAA readiness, CMMC). We will not claim the assessment makes you “compliant.” Service page: security risk assessments.
What you leave with
- Must-fix / should-fix / later — with owners.
- A written plan you can show a broker or board.
- An optional operate-it engagement (Huntress-backed SOC, managed IT) if you don’t have staff to run the fixes.
Self-check first: insurability tool. Then call 531-625-2111. Lincoln hub: /locations/lincoln-ne. Omaha: /locations/omaha-ne. Hickman-based; no storefront.