A technical review of the environment you run, ending in a plan you can execute.

What you receive

Current-state architecture with diagrams, and a ranked list of risks with the evidence behind each one. Every finding says what it affects, how likely it is to matter and what fixing it involves.

A sequenced transformation plan with dependencies, prerequisites and rollback thinking, so the first three moves are obvious. Findings are yours to use with any provider.

Security findings are mapped to the ACSC Essential Eight where it applies, so progress can be measured against a framework your auditors already know.

Where it is sound, the review says so. Some environments need three targeted fixes rather than a full program.

Who leads the review

Every review is led by a senior engineer with hands-on delivery experience across Azure landing zones and hub-and-spoke networks, VMware to Azure Local migrations, Citrix and RDS to Azure Virtual Desktop, Microsoft Defender for Endpoint and Microsoft 365 compliance.

How it runs

1. Scoping: we agree the domains, the questions you need answered and the timeline in writing.
2. Discovery: read-only access wherever it is enough. We review configuration, architecture, telemetry and process, and interview the people who run it.
3. Analysis: findings are tested against the real dependencies rather than a generic checklist.
4. Readout: the plan is walked through with your leadership and technical team, and adjusted before it is finalised.

What we need from you

• Read-only access to the Azure subscriptions, Entra ID tenant and Microsoft 365 admin centres in scope
• An introduction to whoever runs identity, networking and backup
• A short session at the start on your priorities and constraints
• A slot at the end for the readout with your leadership and technical team

Review types

Most reviews combine several of these. We scope to the decision you are facing.

• Azure Architecture Assessment: Landing zone, hybrid paths, operability.
• Microsoft 365 Security Assessment: Identity, tenant posture, what is deferred.
• Infrastructure Health Assessment: What is fragile, what is fine, what waits.
• Cloud Cost / Architecture Review: Spend that follows design, not guesswork.
• Security Gap Assessment: Controls that matter for this estate, not a generic checklist.
• Technical Discovery Workshop: When the outcome is not yet defined enough to price.
• AI Opportunity Assessment: Where AI can go into production in your workflows, systems and data, and what to leave alone.

What happens next

Your team can execute the plan, we can deliver it as Transformation Engineering, or we can take on the operation of the domains involved as Managed Engineering. Each is scoped separately, and the review works whichever you choose.