Health Check
A certificate proves one thing: that what was in scope met the standard on the day of the audit. There are two ways to find out how it is working now. One is free and takes minutes. The other is a practitioner-led review of your real evidence, and it starts with a conversation.
A self-assessed version of the SSF Effectiveness Model. It samples four of the highest-signal areas of your system and gives you an indicative SSF Effectiveness Score, emailed to you on completion. It is a first read, not a verdict.
Practitioner-led
When the board asks "is it working?", an estimate is not enough. The Health Check applies the full SSF Effectiveness Model to what you actually have, and tells you plainly where the system is strong, where it is thin, and what to do first.
Your risk register, management review records, scope, and Statement of Applicability or business impact analysis. A focused set of artefacts, not everything you own.
A RAG-rated report with your SSF Effectiveness Score, written for decision-makers, with prioritised recommendations. Returned within days of receiving your documents, not weeks.
With a conversation, so the review is scoped to your frameworks and your question. A mutual NDA and secure document transfer are in place before anything is shared.
That is up to you. Some clients act on the report with their own team. Others ask us to close the gaps with them. Either way, you have a measured view rather than a hopeful one.
Ready to talk it through? Talk to a practitioner.