Cybersecurity assessments and attestation letters your clients can rely on.
When someone outside your business needs to know your controls are real, a self-declared questionnaire is not enough. We assess what is actually configured, test it and, where the evidence supports it, issue a signed letter of attestation that states exactly what was examined and what was found.
Fictional matter. Same structure as the reports we deliver.
$2M cyber liability insurance · Since 2018 · We work under counsel’s direction when counsel is retained
Reviewed by the ITRS security team · Last updated
A security attestation from IT Rapid Support is a signed letter, issued after an independent assessment and testing, that states exactly which controls were examined and what was found, for your clients, insurers or auditors. It is not a SOC 2 report or a certification.
If a finding ends up in a dispute, we also act as a digital forensics expert witness.
Signs it is time to bring us in.
- A client’s vendor-risk team or security questionnaire wants written, independent assurance
- Your cyber insurance renewal asks about MFA, backups and EDR
- Leadership wants an honest baseline of Microsoft 365 or Google Workspace security
- After an incident, you need independent verification that it is closed
Security assessment
Identity, email, endpoints, backups, network and policy reviewed against recognized control frameworks.
Microsoft 365 / Google Workspace audit
Tenant-wide review of sign-in policy, admin roles, mailbox rules, sharing, retention and alerting.
Independent verification
Post-incident confirmation that compromise has been removed and controls restored.
Letter of attestation
A signed, scoped letter on ITRS letterhead, issued only when the evidence supports it.
What you receive.
- 01Assessment report with rated findings
- 02Microsoft 365 / Google Workspace security audit
- 03Letter of attestation (scoped, signed)
- 04Remediation roadmap
Fictional sample. View only, not a valid attestation.
Before you call.
- Will you sign if we have gaps?
- Only when the evidence supports it. If the assessment finds gaps, you get the findings and a remediation roadmap first, and the letter follows once the fixes are verified. That is what makes the letter worth something to the client or insurer who reads it.
- What does the letter cover?
- Exactly what was examined and what was found, nothing broader. The scope, the date of the examination and the evidence relied on are set out in a schedule to the letter, so the reader can see its limits and does not read it as a general guarantee.
Related services.
Incident Response
A 24/7 line to responders who contain first, preserve evidence second and explain everything.
Digital Forensics
Forensic acquisition and analysis of laptops, phones, mailboxes and cloud tenants, with chain of custody.
Penetration Testing
External, internal, web application and Microsoft 365 testing, every finding verified by hand, with a retest letter when fixes are in.
Related work.
- Case studyFrom Breach Forensics to a Company-Wide Identity PlanFrom reconstructing a 2018 mailbox compromise minute by minute to scoping centralized Entra ID and Intune management for a 40 to 50 person pharma firm.
- Case studyCleaning Up a Microsoft 365 Tenant for a Fire Protection & Security CompanyHow IT Rapid Support audited every Microsoft 365 group for a GTA fire protection company, fixed mail routing, and cut an 82,456-item mailbox by 62%.
Under attack right now?
Call before you reset passwords, wipe a laptop or pay anyone. A responder will help you contain the incident without destroying the evidence you will need later.