Question 1

What documentation do I need to provide?

Accepted Answer

You will need to provide network diagrams, system architecture documents, security policies, and any existing assessment reports. If you do not have formal documentation, our questionnaire will guide you through capturing the essential information. We work with what you have available.

Question 2

How is the assessment conducted?

Accepted Answer

Our assessment is conducted remotely by an experienced security architect. We analyse your submitted documentation and questionnaire responses against relevant frameworks (ISM, NIST, CIS Controls, and others as appropriate). There is no on-site visit required for a Rapid Assessment.

Question 3

What frameworks are used in the assessment?

Accepted Answer

The primary framework depends on your product selection. Assessments typically reference the Australian Information Security Manual (ISM), NIST Cybersecurity Framework, CIS Controls, and ASD Essential Eight. Your report will map findings to the frameworks most relevant to your organisation and industry.

Question 4

Can I choose which areas to focus on?

Accepted Answer

The Rapid Assessment covers the full scope defined for each product. If you need a targeted assessment focusing on specific areas, the Defined Scope Health Check (Tier 2) allows you to select specific modules. Contact us to discuss which option is the best fit.

Question 5

What happens after I receive the report?

Accepted Answer

Your report includes prioritised findings with actionable recommendations. Each finding is mapped to a severity level and includes specific remediation steps. You are welcome to reach out with questions about the report. For organisations that want implementation support, we offer ongoing advisory engagements.

Question 6

Is my documentation kept confidential?

Accepted Answer

Absolutely. All client documentation is treated as strictly confidential. We follow secure handling procedures for all submitted materials. Documents are stored in encrypted environments and accessed only by assigned consultants.

Question 7

What happens to my data after the engagement?

Accepted Answer

All source material including documents, diagrams, questionnaire responses, and working notes is automatically and permanently deleted from our systems once the engagement is complete and the report has been delivered. We do not retain any client data unless you specifically request that we keep it on file for future engagements. You will receive confirmation when destruction is complete.

	Muon Partners Rapid AssessmentRecommended	Big-4 Firm	General Consultant	In-House Team
Cost	$2,500	$30,000-$100,000+	$5,000-$15,000	Salary + opportunity cost
Timeline	10 business days	8-16 weeks	4-8 weeks	4-12 weeks
Expertise Depth	Deep, framework-mapped	Broad, often junior-delivered	Generalist	Varies by staff
Framework Coverage	ISM, NIST, CIS, E8	Comprehensive	1-2 frameworks	Depends on knowledge
Actionable Output	Prioritised report with remediation steps	Detailed report (often generic)	Report (variable depth)	Internal document (variable quality)

From purchase to actionable report in 10 business days

Five steps to clarity

Purchase and Onboarding

Document Upload and Questionnaire

Expert Review and Analysis

Report Delivery

Data Destruction

Common questions about the process

How does a Rapid Assessment compare?

Ready to get started?