Skip to content
VETERAN-OWNED · NEBRASKA-BASED
Incident now?(531) 625-2113
SAINT signature logo
Free Assessment
Macro photo of a computer motherboard with an ITE chip and capacitors

Security Risk Assessments

A security risk assessment you can operate — not a 60-page shelfware PDF.

Security assessment services for Lincoln and Omaha start here. A SAINT security risk assessment is a scoped review of how your identity, email, endpoints, backup, and network actually run — mapped to NIST CSF language and the questionnaire in front of you (cyber insurance, HIPAA-readiness, CMMC, board). You leave with must-fix / should-fix / later, owners, and a written plan. It is not a pentest, not a compliance certificate, and not a Huntress (or Guardz) sales call. If you want us to operate the fixes afterward, we pick Huntress or Guardz as the cyber stack — one or the other — after the report, not as the backbone of the assessment itself.
NIST CSF + CIS Controls + CISA CPGs as alignment — not fake certifications
Identity, email, endpoints, backup, network — documented current state
Written roadmap; optional operate-it engagement after
Estimate-only catalog tile exists; labor and electrical are not in retail planning totals
Schedule Security Risk AssessmentCheck Your Risk Score — Free, ~4 Minutes531-625-2111

Capabilities

What this engagement covers

  • 01

    Current-state inventory

    Who has admin, where MFA actually is, which endpoints are unmanaged, whether backup restores have been tested, and how email forwarding and guest sharing really work — not a checkbox survey you fill out alone.
  • 02

    Framework mapping (alignment, not a stamp)

    We map findings to NIST CSF functions, CIS Controls (Implementation Group language where it fits), and CISA Cross-Sector Cybersecurity Performance Goals. We do not claim to be a certified NIST, CIS, or CISA assessor. We will not sell “you are HIPAA compliant.”
  • 03

    Questionnaire-ready evidence list

    Cyber-insurance, HIPAA-readiness, and CMMC questions get answers tied to controls you can show — or an honest gap. Pair with /tools/insurability for a self-check before the call.
  • 04

    Prioritized remediation

    Must-fix / should-fix / later with owners. If a cheaper process change beats a new product, we say so. Huntress or Guardz is an operate-it option after the report — not a requirement to buy the assessment.
  • 05

    What this is not

    Not a penetration test. Not a red-team. Not a vCISO retainer (that’s /risk-advisory-vciso). Not a physical facility walkthrough (that’s /physical-security-assessments). Not a binding quote from a public price book — formal proposal follows discovery. See /pricing.
  • 06

    Labor, electrical, and follow-on work

    Site-wide policy: labor is not included in catalog planning totals. Electrical, low-voltage, and third-party contracting are excluded unless quoted separately. Install, configuration, and managed services are scoped after we see the environment.

Standards we reference — alignment, not certification

These are the languages we write the report in. We are not selling a certified-assessor badge for any of them.
Schedule Security Risk AssessmentCheck Your Risk Score — Free, ~4 Minutes531-625-2111

Frequently asked

Are these security assessment services?+
Yes. Security assessment services here are a scoped review of identity, email, endpoints, backup, and network, written as a roadmap. A NIST Cybersecurity Framework assessment on this engagement is alignment language, not a certification. The self-check lives at /assessment/nist-csf. Lincoln and Omaha work is remote or on-site from Hickman.
Do you offer penetration testing in Lincoln?+
No. We do not sell penetration testing in Lincoln or a Nebraska penetration testing service. This assessment is not a pentest and not a red team. If that is the engagement you need, we will say so instead of renaming this one.
Is this the same as a vCISO engagement?+
No. This is a time-boxed assessment and written plan. vCISO is ongoing fractional leadership. Many clients start here and only retain vCISO if they need someone on the insurance and board cadence. See /risk-advisory-vciso.
Do I have to buy Huntress or Guardz?+
No. The assessment stands alone. If you want SAINT to operate detection afterward, we design Huntress (SOC-led modular) or Guardz (SMB all-in-one) — one core stack, not both without a reason.
Is the catalog price a binding quote?+
No. We do not publish sticker prices for assessments. A formal proposal follows discovery. See /pricing for how we bill.
Will you certify us against NIST, CIS, HIPAA, or CMMC?+
No. We align and evidence. Auditors, carriers, and C3PAOs determine outcomes. We will not sell a fake certificate.
Lincoln or Omaha — is this remote or on-site?+
Both, sized to the environment. Lincoln is a short drive from Hickman; Omaha-metro is scheduled on-site when walking the office adds value. No storefront. Hubs: /locations/lincoln-ne · /locations/omaha-ne.

Lincoln & Omaha — how this actually shows up locally

  • Lincoln, NE

    Lincoln security risk assessments — clinics, offices, civic-adjacent.

    Haymarket professional offices, independent clinics, and small-municipal environments get a written gap list mapped to the questionnaire they actually have — not a coastal PDF mill. Hickman-based; no Lincoln storefront.

    Lincoln, NE hub

  • Omaha, NE

    Omaha-metro assessments for multi-site identity and email risk.

    Omaha work is often several buildings and one messy tenant. We assess identity, email, and backup as one surface — then you decide whether Huntress, Guardz, or neither is the operate-it path. Scheduled on-site; no Omaha HQ.

    Omaha, NE hub

Related

Keep going.

Ready to see where you stand?

Not sure where you stand? Take the free self-assessment at /assessment (NIST CSF, HIPAA, CISA CPG, FTC Safeguards, GDPR), or book a short call for a written plan. No fake certifications.
Get Your Free Security & IT AssessmentCheck Your Risk Score — Free, ~4 Minutes531-625-2111

30 minutes. NIST-aligned report. No obligation.