You feel something isn't right with your digital landscape, but you can't get a straight answer. Or you know a big decision is coming and first want to know, independently, whether the current foundations can take it. Within two to four weeks at most, we get a clear picture together.
Three of the moments when companies call us for an audit. If one of them sounds familiar, you're in the right place.
Nobody complains openly, but you notice small things always take too long. Getting a new employee started takes a week. Running a report is a ritual involving three systems. You want to know whether that's structural, and what it would cost to do things differently.
A supplier proposes a new platform, or the accountant is pushing to replace the ERPEén systeem dat je kernprocessen zoals voorraad, boekhouding en orders samenbrengt.. Before you sign, you want to know whether your current architecture, processes and team can handle it. Not what the supplier thinks. An independent view.
Your IT lead is retiring, or your regular freelancer is calling it a day. What's in their head that isn't documented anywhere? An audit brings that silent knowledge to light before it's too late.
We first understand how your company works, then look specifically for where risk is building up.
What's where, who has access, and is it still correct? Duplicate sources and islands of Excel make it unclear.
Do your systems still fit how your business really works? We look at where work gets stuck: manual steps, double entry, and tasks left lying because nobody owns them.
Integrations are often the weakest link: more fragile than people think, and sometimes built by someone who has since left.
Does the structure still fit where you want to go, or are you building on foundations that can no longer take the load?
First look. Then test. Then deliver. No talk of formal methodologies, but a structured diagnosis you can keep using yourself afterwards.
We map what you have: systems, suppliers, integrations, people with access, running contracts. Not an inventory of tools for its own sake. We look specifically at where problems typically arise: at the handovers between systems, people or parties.
We talk to your people, read logs and config files where that makes sense, and look at concrete figures (uptime, response times, ticket volumes where available). No penetration test, no security audit at that level (others do that better). But an honest look at architecture, processes and organisational risk.
We distil it into 3 to 5 findings and 2 to 3 scenarios for what you could do now. Not a list of 47 'recommendations' nobody can act on. Instead: what has priority, what costs order-of-magnitude X, and what can wait without breaking anything.
Finally we schedule two hours with you and whoever you want to bring. We go through the findings, answer questions and adjust where needed. The document is yours. You can reuse it in board meetings or in conversations with partners.
An audit only works if both sides deliver. Being clear up front about who carries what avoids frustration halfway through.
The diagnostic work you don't have the time or distance for.
Work only you or your team can do.
No technical dictionary. For each finding you read how serious it is, what it means in plain language, and which area it affects.
I read the logs nobody else reads. That's usually where the real story is, not in the slides you're shown.
A service SME wondered whether its current IT architecture could handle its customer base doubling. We delivered our findings and 3 scenarios in 3 weeks. On that basis, management could decide to postpone or go ahead with the planned investment. No more supplier pressure.
“We thought the system was our problem. After the audit, it turned out the processes around it were the real risk. No supplier would have told us that, because it doesn't cost them a customer. Walter and Jan did.”
Missing one? Call or email. We answer without a sales pitch.
Another question? Call us for half an hour
A security audit digs deep into one layer (network, application vulnerabilities, penetration tests). Our audit looks wider and less deep: architecture, processes, team composition, organisational risk. For security depth, others do it better. For 'is the picture in my head right?', we do it better.
No. You get 3 to 5 findings (what we saw) plus 2 to 3 scenarios (what you can do about it). Not a 47-point list you then have to prioritise. We don't have that context; you do. We make the decision work lighter, not heavier.
Then that goes in the report in black and white too. No culture of 'we found something after all to justify the invoice'. Sometimes the most important result is that you now know, with data, that your current setup is good enough for the next 12 to 24 months.
That depends on the scenario. If the outcome calls for project management or turning it into an implementation, we can possibly take that on (see programme management). If the outcome is that your current partner can solve it themselves, we hand over the report and leave the rest of the delivery to them. No vendor lock-in.
Fixed price per scope. In the first conversation we decide together whether it's a light audit (2 weeks) or a broader one (4 weeks max) and give you a fixed price. No surprises afterwards.
