Contact options
5.0 / 5Google reviewsIdentify Security Gaps and Prioritize Improvements
Unused accounts, missing patches, and overly broad permissions can put business systems at risk. Our IT security assessment services help you find these gaps and decide what to fix first. We use tools such as Tenable, SentinelOne, and Stellar Cyber to support the review.
DK’S Enterprises, Ltd. has provided IT and security services since 1999. Our cybersecurity assessments help businesses in Queens, Brooklyn, Nassau County, Manhattan, and northern New Jersey understand where their systems need attention.
Our office is at 159 Doughty Blvd, Suite 1, Inwood, NY 11096.
What We Check
Security software is only part of the picture. We review your systems, accounts, and controls to see how they’re configured, where protection is missing, and what those gaps mean for your business.
- Active Directory security assessment: administrator accounts, group policies, passwords, unused accounts, and ways users could gain excessive access
- Multi-factor authentication: MFA coverage across Microsoft 365, VPN, RDP, and admin portals – including gaps in conditional access policies
- Endpoint security posture: SentinelOne or existing EDR agent status, policy enforcement, detection rule updates, and device compliance
- Vulnerability assessment: scanning agreed systems for missing patches, known weaknesses, and exposed services
- Network security assessment: firewall rules, access permissions, VPN settings, and exposed connections
- Microsoft 365 security: Secure Score review, mailbox forwarding rules, app permissions, SharePoint/OneDrive sharing policies, audit logging status
- Backup security: access segregation, retention policies, immutability settings, recovery test records
How the Assessment Works
We follow a consistent 4-phase process aligned with NIST Cybersecurity Framework and CIS Controls principles:
1. Scoping and access. We agree which systems, accounts, and network segments to review, what access we need, and when testing will take place.
2. Technical review. We scan for vulnerabilities and check endpoint protection, Active Directory, firewall rules, and Microsoft 365 settings. This typically takes 3–5 business days, depending on the size of your environment.
3. Analysis and priorities. We rank findings by severity and business impact, separating urgent issues from routine improvements so you can plan the work and budget.
4. Report and walkthrough. You receive a report showing each finding, the affected systems, its severity, and recommended fixes. We explain the results to your team. Any work to fix the issues is agreed separately.
Common Findings We Uncover
In our assessment work, we often find problems such as:
- Administrator accounts used for everyday work, giving attackers broad access if an account is compromised
- MFA missing from administrator portals or VPN access
- Overly permissive firewall rules that make unwanted connections harder to control
- Unpatched Windows servers running critical services despite known vulnerabilities
- Unreviewed Microsoft 365 forwarding rules that could expose email outside the organization
- Backup credentials without sufficient separation from production accounts, increasing the risk that both are compromised
- Endpoint protection that has stopped reporting or receiving updates
- Unsupported systems on flat networks, with limited isolation from other business resources
If any of these sound familiar, an assessment can help you understand the risk and choose where to start.
When You Should Run an Assessment
- After a security incident or close call – phishing success, unauthorized access, ransomware attempt
- Before or after infrastructure changes – server migration, firewall replacement, cloud adoption
- During compliance preparation – HIPAA, PCI-DSS, NIST 800-171, or cyber insurance applications
- After IT staff changes, to review existing configurations and administrator access
- When switching IT providers – baseline audit before a new MSP takes over
- As part of a regular security review, because systems, staff, and threats change over time
What You Receive
- Executive summary – overall risk posture, critical findings count, and top 3 priorities for leadership review
- Technical findings report – each issue documented with affected system, severity rating (Critical/High/Medium/Low), evidence, and specific remediation steps
- Vulnerability scan output – Tenable scan results with CVE references, patch status, and exposure timeline
- Microsoft 365 security review – Secure Score breakdown, conditional access gaps, mailbox audit findings
- Prioritized remediation roadmap – what to fix first, estimated effort, and dependencies between fixes
- Live walkthrough session – we review the report with your team, explain findings in plain language, and answer questions
Built for 10–250 User Environments
Our assessments are designed for small and mid-sized businesses, typically with 10–250 users, local servers, Microsoft 365, and business applications. We work with medical practices, legal offices, logistics companies, manufacturers, and professional services firms.
You don’t need an internal security team. We handle the technical review, explain the results in plain English, and help you prioritize fixes based on the risks to your business.
Find Out Where Your Business Is Exposed
Request a security assessment to review your vulnerabilities, configurations, and access controls. You’ll receive a written action list, with the schedule confirmed before we begin.
Existing clients with an active security concern should contact Support using their agreed escalation process.
Tell us which systems you use and what’s concerning you. We’ll agree what to review, the access we need, the schedule, and what the final report will include.
FAQ
We walk through the findings with your team and help prioritize the next steps. You choose which work to approve: Vulnerability Remediation fixes specific weaknesses, while Security Hardening improves system settings and access controls.