Build Reviews

A Build Review involves evaluating the security configurations of your IT systems, ensuring they align with industry best practices and security benchmarks. This helps identify vulnerabilities and misconfigurations that could be exploited by attackers.

Build Reviews proactively identify and address security weaknesses in your system configurations, reducing the risk of breaches and ensuring your IT environment is securely configured against evolving threats.

A cyber security build review involves a systematic assessment of the security configuration applied to devices and systems within your organization’s IT environment. This includes servers, laptops, mobile devices, and network equipment such as firewalls, routers, and switches. The review evaluates the effectiveness of current security settings, identifies misconfigurations or deviations from best practices, and uncovers any weaknesses that could expose your organization to potential threats.

Build Reviews should be conducted regularly, especially after significant changes to your IT environment or systems. It’s also recommended to perform reviews annually to ensure your configurations remain secure and compliant with the latest security standards.

A Build Review should be conducted by certified security professionals with expertise in configuration management and security benchmarking. CyberLab’s team is CREST and CHECK certified, ensuring compliance with industry standards and best practices.

While Penetration Testing simulates attacks to identify exploitable vulnerabilities, Build Reviews focus on manually inspecting system configurations against security benchmarks to identify misconfigurations and hardening weaknesses before they can be exploited.

Yes, you will receive a comprehensive report that outlines the findings, categorising vulnerabilities by severity, and providing actionable recommendations to enhance your systems’ security.

CyberLab assesses configurations against CIS Benchmarks Level 1 and 2, DISA STIG (Defense Information Systems Agency Security Technical Implementation Guides) and Microsoft Security Baselines. CIS Benchmarks are globally recognised consensus-based configuration guidelines developed by the Center for Internet Security and are widely accepted as the industry standard for system hardening. Level 1 benchmarks cover essential configuration changes with minimal operational impact, while Level 2 covers more comprehensive hardening measures suited to high-security environments.

A penetration test actively attempts to exploit vulnerabilities in your systems, simulating a real attacker. A build review is a manual inspection of how your systems have been configured, comparing current settings against security benchmarks without attempting active exploitation. The two services are complementary – a build review identifies hardening weaknesses before a pen test, and a pen test validates whether remaining weaknesses after remediation can actually be exploited. Many organisations run both as part of a structured security programme.