Cybersecurity, made simple.
Aurum Dynamics is an independent cybersecurity advisory firm. We help small businesses and defense suppliers see where their security gaps are, and what to fix first, in plain English.
Understand
See where your security stands today, backed by evidence rather than guesswork.
Prioritize
Know which gaps matter most to your business and which can wait.
Improve
Follow a clear 30/60/90-day roadmap your team can actually act on.
One focused service, done properly.
Most small businesses don’t need a long menu of services. They need to know where they stand and what to fix first. That is what the Security Baseline Assessment delivers.
Aurum Security Baseline Assessment
For small businesses, technology companies and small defense suppliers without a dedicated security leader. We review selected security controls, find the gaps, and give leadership a prioritized plan.
Request a Security Assessment- Initial business and security discovery meeting
- Defined assessment scope
- Review of selected security controls
- Limited authorized evidence review
- Preliminary security gap analysis
- Evidence-backed findings register
- Risk prioritization
- 30/60/90-day remediation roadmap
- Executive summary report
- Final findings presentation
What it is not
- It is not a penetration test.
- It is not a formal certification assessment.
- It does not guarantee that every vulnerability is found.
- Any technical testing requires your written authorization.
- The scope is agreed with you before work begins.
Advisory engagements
Scoped individually after a consultation, according to available expertise and resources. Ongoing virtual CISO support and other broader programs are not offered as standard services at this time.
Aurum Dynamics is an independent cybersecurity advisory business. It is not a CMMC Third-Party Assessment Organization (C3PAO), a certification body, a SOC 2 attestation auditor or a law firm, and it cannot certify a customer or guarantee compliance or any audit result. Formal certifications and attestations must be performed by appropriately authorized independent assessors or auditors.
NIST SP 800-171 sets security requirements for protecting Controlled Unclassified Information. CMMC is the Department of Defense program that verifies those requirements for contractors. CMMC Level 2 is currently based on NIST SP 800-171 Revision 2. NIST has published Revision 3 and DoD has signaled a transition, so confirm which revision your contract requires.
How the assessment works.
Discover
A short meeting to learn your business, your data and what you need.
Scope
We define what is in and out of scope, in writing, before work begins.
Review
We evaluate selected controls and any evidence you authorize us to see.
Report
You receive findings, priorities, a 30/60/90-day roadmap and a presentation.
Written authorization
No technical testing happens without your written approval.
Honest limits
We state what an assessment can and cannot find. We never promise complete security.
Confidentiality
Your information stays confidential, and a mutual NDA can be signed before you share anything.
From uncertainty to clarity.
This is the kind of report a Security Baseline Assessment produces.
Executive summary
Example Co. (fictional), a 25-person engineering firm, has a workable security foundation. Four gaps account for most of its near-term risk and can be addressed in about 90 days with its existing team. The first priority is enforcing multi-factor authentication on remote access.
| ID | Observation | Evidence reference | Severity | Priority |
|---|---|---|---|---|
| F-01 | Multi-factor authentication is not enforced for remote access | E-03 · VPN settings export | High | 1 |
| F-02 | Two former employees still have active accounts | E-11 · User account list | High | 2 |
| F-03 | Nightly backups run, but no restore test is on record | E-07 · Backup job log | Medium | 3 |
| F-04 | Security policies exist but staff have not acknowledged them | E-02 · Policy folder listing | Low | 4 |
Days 1–30
Enforce MFA on remote access. Disable the two stale accounts.
Days 31–60
Perform and document a backup restore test. Create an offboarding checklist.
Days 61–90
Collect staff policy acknowledgments. Review progress with leadership.
Transparent pricing.
The Security Baseline Assessment starts at $1,500. Your final price depends on the scope we agree together. Every engagement begins with a defined scope and written proposal.
Security Baseline Assessment
- Discovery meeting and defined scope
- Review of selected security controls
- Limited authorized evidence review
- Findings register and risk prioritization
- 30/60/90-day remediation roadmap
- Executive summary and final presentation
What sets your price
- Number of employees
- Number of systems
- Assessment scope
- Complexity of the environment
- Evidence availability
- Required deliverables
Not included
- Penetration testing or vulnerability scanning, unless separately authorized in writing
- Formal certification or attestation
- Hands-on remediation work
- Unlimited or repeat assessments
- Third-party audit, assessor and software fees
Advisory engagements that need additional expertise or personnel are quoted after a consultation, where availability and scope are confirmed.
Preliminary Security Readiness Snapshot.
Ten quick questions and a few starting recommendations. Your answers stay in your browser and are not sent anywhere.
Controls you confirmed
Answer to see your snapshot
“Not sure” counts as not yet confirmed.
This questionnaire is an introductory self-assessment. Its results are based solely on your answers and have not been independently verified. They do not establish regulatory compliance, certification readiness, or the absence of security vulnerabilities.
Built on intelligence. Driven by precision.
Aurum Dynamics was founded by a U.S. Army intelligence analyst with a background in security and threat assessment. The founder continues to study computer science and cybersecurity, applying that technical foundation to practical tools that help organizations identify, understand and prioritize security risks.
Aurum Dynamics combines analytical discipline, evidence-based risk assessment and straightforward communication to help small businesses make better cybersecurity decisions.
Intelligence analysis
U.S. Army intelligence analyst trained to turn complex information into clear decisions.
Security and threat assessment
Experience in protective security and threat assessment.
Computer science and cybersecurity
Actively studying the technical foundations behind how systems are built, attacked and defended.
Questions.
Is this a penetration test?
No. The Security Baseline Assessment reviews controls and evidence. Any technical testing is separate and requires your written authorization.
Can you certify us for CMMC or SOC 2?
No. Certifications and attestations must come from authorized independent assessors or auditors. We help you prepare for them.
Will you replace my IT provider?
No. They keep your systems running. We help you understand your gaps and plan fixes, and we can coordinate with them.
Who do you work with?
Small businesses, technology companies and small defense suppliers that don’t have a dedicated security leader.
What do you need from me?
A discovery conversation, and access to the documents and evidence you choose to authorize. Please don’t send passwords or sensitive technical records through the website.
How much does it cost?
The Security Baseline Assessment starts at $1,500. Your final price is set in a written proposal after we define the scope.
Request an assessment.
Tell us a little about your business. We will reply as soon as we can to arrange a discovery call.