A structured assessment workshop with your CTO and CISO team, scoring your infrastructure against 60+ controls across 9 categories. You receive a detailed report with gap analysis, risk prioritisation, and a concrete remediation roadmap.
The assessment is a structured, evidence-based workshop — not a questionnaire. Our engineers work through each control category with your technical leadership to produce an objective score.
Before the workshop, we review your current infrastructure documentation, architecture diagrams, and vendor contracts. This allows us to focus workshop time on verification and gap analysis rather than discovery.
Duration: 30-60 minutes (remote call)
A structured 2-4 hour session where we work through all 9 categories and 60+ controls with your team. Each control is scored with supporting evidence. We identify gaps, document risks, and discuss remediation options in real time.
Duration: 2-4 hours (on-site or remote)
Within 5 business days, you receive a comprehensive sovereignty report: composite score, per-category breakdowns, individual control scores, gap analysis, and risk-prioritised remediation recommendations with estimated effort.
Delivery: 5 business days after workshop
A follow-up session to walk through the report findings, answer questions, and refine the remediation roadmap based on your organisation's priorities, budget, and timeline constraints.
Duration: 60 minutes (remote call)
The assessment produces a structured, actionable report — not a slide deck with generic recommendations. Every finding is tied to a specific control, scored objectively, and accompanied by a concrete remediation path.
Example output for a typical hybrid cloud deployment in the financial services sector.
The assessment requires participants who can answer detailed questions about infrastructure architecture, security controls, vendor contracts, and operational procedures. The ideal workshop group includes:
Not all roles are mandatory. The minimum effective group is CTO + CISO + Infrastructure Lead.
No advance preparation is strictly required, but having the following materials available will significantly improve the depth and accuracy of the assessment:
We will provide a detailed preparation checklist after you submit your assessment request.
CloudToko B.V. — The Hague, Netherlands