# Rapid Cyberattack Assessment Workshop (Full - On-site) > The Rapid Cyberattack Assessment Workshop (Full - On-site) is an assessment engagement culminating in a two-day on-site workshop for organizations that want to evaluate their cybersecurity posture and preparedness for rapid cyberattacks such as ransomware. IT Partner reviews pre-assessment questionnaires and assessment tooling results, facilitates on-site workshops to analyze gaps and Microsoft technology opportunities, and delivers findings, recommendations, and a tailored Rapid Cyberattack Roadmap. Canonical: https://o365hq.com/services/rapid-cyberattack-assessment-workshop-on-site Provider: IT Partner LLC — US Microsoft partner since 2006. Book: https://o365hq.com/book **Price:** $12,500 per project · **Duration:** 4 weeks · Fixed price, pay after approval. ## Overview This on-site workshop applies IT Partner's rapid cyberattack assessment methodology — originally delivered as a Microsoft partner engagement — to assess cybersecurity readiness against rapid cyberattacks, including ransomware. IT Partner works with your team to review questionnaire responses and assessment tooling results, identify vulnerabilities and critical gaps, and develop a roadmap for strengthening defenses using Microsoft technologies where appropriate. The engagement culminates in a two-day on-site workshop focused on findings, gap analysis, priorities, roadmap delivery, solution briefings, and technical readiness presentations. ## Success criteria - A completed Rapid Cyberattack Roadmap tailored to the customer’s environment. - Detailed documentation of findings and actionable recommendations. - A clear understanding of Microsoft technologies and their implementation. ## Deliverables - A prioritized Rapid Cyberattack Roadmap tailored to your environment. - Comprehensive documentation of findings and actionable recommendations. - Assessment tooling reports highlighting vulnerabilities and gaps in your current setup. - A workshop summary and next steps to take your cybersecurity strategy to the next level. - Kickoff presentation. - Pre-assessment documentation. - Initial findings and gap analysis. ## Implementation plan 1. **Week 1 – Kickoff** — Activities: Kickoff meeting to align goals and expectations. Provide pre-assessment questionnaire and assessment tooling guidance. Deliverables: Kickoff presentation. Pre-assessment documentation. 2. **Week 2 – Assessment** — Activities: Complete the pre-assessment questionnaire and run the agreed assessment tooling. Analyze tool outputs and begin roadmap planning. Deliverables: Initial findings and gap analysis. 3. **Week 3 – On-Site Workshop, Day 1** — Review findings from questionnaires and assessment tooling. Conduct a gap analysis and identify customer priorities. Develop a preliminary roadmap. 4. **Week 3 – On-Site Workshop, Day 2** — Finalize and deliver the roadmap. Conduct solution briefings and technical readiness presentations. ## Prerequisites - Appropriate Microsoft security licensing (e.g., Microsoft Defender for Endpoint, Microsoft Sentinel). - A dedicated machine to run the agreed assessment/data-collection tooling. - Stable internet connectivity for tool installation and data sharing. - Availability of security architects, IT administrators, and other relevant stakeholders. ## Responsibilities **IT Partner:** - Planning: Conduct a kickoff meeting to establish objectives and governance. - Planning: Provide a pre-assessment questionnaire and guidance for the agreed assessment tooling. - Implementation: Review completed questionnaires and assessment tooling results. - Implementation: Facilitate on-site workshops to analyze findings, conduct a gap analysis, and identify opportunities to leverage Microsoft technologies. - Implementation: Develop and deliver a comprehensive, actionable roadmap tailored to customer requirements. - Post-Implementation Support: Provide post-engagement documentation, including workshop findings and roadmap recommendations. - Post-Implementation Support: Offer guidance on next steps and additional services if required. **Client:** - Information: Complete the pre-assessment questionnaire accurately and on time. - Information: Ensure assessment tooling outputs are ready before the scheduled workshops. - Access: Grant access to IT administrators, security architects, and relevant personnel. - Access: Provide a dedicated machine for running the assessment tooling. - Participation: Attend all scheduled meetings and workshops. - Participation: Actively engage in roadmap discussions and approve necessary actions. ## Not included - Implementation of roadmap recommendations (available as an add-on service). - Extended post-engagement support beyond the defined scope. - Custom configurations or advanced integrations outside standard recommendations. ## FAQ ### What is the Rapid Cyberattack Assessment Workshop (Full - On-site)? The Rapid Cyberattack Assessment Workshop (Full - On-site) is a cybersecurity assessment engagement culminating in a two-day on-site workshop focused on preparedness for rapid cyberattacks such as ransomware. IT Partner reviews pre-assessment questionnaire responses and assessment tooling results, analyzes gaps, identifies Microsoft technology opportunities, and delivers findings, recommendations, and a tailored Rapid Cyberattack Roadmap. ### Who is this workshop designed for? This workshop is designed for organizations that want to evaluate their cybersecurity posture and readiness for rapid cyberattacks, including ransomware. It is especially relevant when security architects, IT administrators, and other stakeholders can participate in assessment activities, workshop discussions, and roadmap planning. ### How long does the Rapid Cyberattack Assessment Workshop take? The listed duration is 4 weeks. The engagement moves through kickoff and pre-assessment preparation, questionnaire and assessment tooling analysis, and a concluding two-day on-site workshop for findings review, gap analysis, roadmap finalization, solution briefings, and technical readiness presentations. ### How much does the Rapid Cyberattack Assessment Workshop (Full - On-site) cost? The workshop is $12,500 per project, quoted fixed-price in writing before work begins. Implementation of the roadmap recommendations is not included and is quoted separately as follow-on work. ### What deliverables are included in the workshop? The workshop includes a prioritized Rapid Cyberattack Roadmap tailored to your environment, comprehensive documentation of findings and actionable recommendations, assessment tooling reports highlighting vulnerabilities and gaps, and a workshop summary with next steps. It also includes a kickoff presentation, pre-assessment documentation, and initial findings and gap analysis. ### What happens during the two-day on-site workshop? On Day 1 of the on-site workshop, IT Partner reviews the questionnaire and assessment tooling findings, conducts gap analysis, identifies customer priorities, and develops a preliminary roadmap. On Day 2, IT Partner finalizes and delivers the roadmap and provides solution briefings and technical readiness presentations. ### What is the Rapid Cyberattack Roadmap? The Rapid Cyberattack Roadmap is a prioritized plan tailored to the customer’s environment for improving readiness against rapid cyberattacks. It is based on questionnaire responses, assessment tooling results, identified vulnerabilities, gap analysis, and opportunities to use Microsoft technologies where appropriate. ### Does this service include implementation of the roadmap recommendations? No, implementation of the roadmap recommendations is not included in the standard workshop scope. The service provides assessment, findings, recommendations, and a tailored roadmap; implementation is available as an add-on service and should be scoped separately with IT Partner. ### What is not included in the Rapid Cyberattack Assessment Workshop? The workshop does not include implementation of roadmap recommendations, extended post-engagement support beyond the defined scope, or custom configurations and advanced integrations outside standard recommendations. These items may require additional services and should be confirmed with IT Partner before the engagement. ### What prerequisites are required before starting the workshop? Prerequisites include appropriate Microsoft security licensing, such as Microsoft Defender for Endpoint or Microsoft Sentinel where applicable, a dedicated machine to run the agreed assessment tooling, and stable internet connectivity for tool installation and data sharing. The customer must also make security architects, IT administrators, and other relevant stakeholders available for the engagement. ### What are the client’s responsibilities during the engagement? The client is responsible for accurately completing the pre-assessment questionnaire on time, ensuring assessment tooling outputs are ready before the workshops, and providing a dedicated machine for the tooling. The client must also make IT administrators, security architects, and relevant personnel available, attend scheduled meetings and workshops, participate in roadmap discussions, and approve necessary actions. ### Is a remote version of the workshop available? Yes — a remote form of the Rapid Cyberattack Assessment Workshop is delivered over two days of webinars. See the linked remote workshop page for its scope, pricing, and schedule. --- Fixed-price engagement by IT Partner LLC. To scope it for your tenant, book a call with Mike (https://o365hq.com/book) or request a quote via the site's /api (see https://o365hq.com/openapi.json).