Systems and accounts review
We review the systems and accounts your organization runs today. Nothing is switched on until scope and response rules are agreed.
Security assessment
Book a FunctionOne cybersecurity assessment
A FunctionOne security assessment reviews your systems and accounts, and you can book one through the form on this page or by calling 315-437-6714. It's the first step for all FunctionOne clients. After the review, we agree scope and response rules with your team before anything is switched on. Our offices are in Syracuse, New York and Tampa, Florida.
Book a security assessment
We'll review your systems and accounts, then agree scope and response rules with you before anything is switched on.
We use your details only to arrange your assessment.
What does a FunctionOne security assessment include?
A FunctionOne IT security assessment moves through set stages, starting with a review of your systems and accounts.
Devices and locations
We confirm which devices and locations the scope covers, from offices and laptops to phones, servers and cloud.
Identities and data sources
We list the user identities and data sources that belong in scope.
Critical operations
Your leadership names the operations the business depends on most. Those operations shape the scope we confirm with you.
Approved response actions
You approve the actions our security analysts may take and the approvals needed for sensitive systems. Containment happens only within those rules.
Contacts and escalation
We record primary and backup contacts and agree how after-hours escalation works for your team.
Connection and testing
We connect agents, cloud connections or log collectors, then test notifications and responses.
Review and upkeep
We review and maintain the setup over time. Leadership gets a monthly summary and a regular security review.
Why does FunctionOne start with a security assessment?
Losses reported to the FBI passed USD 20 billion in 2025, from more than 1 million complaints, according to the FBI IC3 2025 Internet Crime Report, published in 2026. A security risk assessment for business is the first step FunctionOne takes with any new client.
NIST's Guide for Conducting Risk Assessments (SP 800-30 Rev. 1), published in 2012, defines risk assessment as the process of identifying, estimating and prioritizing information security risks so senior leaders have the information to choose a response. FunctionOne reports to leadership with owners and next steps. Leaders also get a monthly summary and a regular security review.
In The NIST Cybersecurity Framework (CSF) 2.0, published by NIST in 2024, a Current Profile records the outcomes an organization achieves today, and comparing it with a Target Profile shows the gaps to close in an action plan. A network security assessment from FunctionOne starts with your current systems and accounts. From there, we confirm scope with your leadership and agree response rules before anything is switched on.
How does a FunctionOne security assessment work?
FunctionOne reviews your systems and accounts, then sets up protection in stages so nothing gets switched on until you've agreed to it.
Confirm the scope
We list the devices, identities, locations and data sources in scope. Your leadership names the critical operations.
Agree response rules
You approve the actions our analysts may take and the approvals needed for sensitive systems. We also set primary and backup contacts and after-hours escalation.
Connect and validate
We connect agents, cloud connections or log collectors. Then we test notifications and responses.
Review and maintain
We review the setup and keep the scope and rules current.
What changes after a FunctionOne IT security assessment?
This comparison shows where your organization stands before the assessment and after FunctionOne finishes setup.
| Before the assessment | After FunctionOne setup |
|---|---|
| FunctionOne hasn't reviewed your systems and accounts | FunctionOne has reviewed your systems and accounts |
| No after-hours escalation is agreed with FunctionOne | Primary and backup contacts and after-hours escalation are set |
| No regular reporting from FunctionOne | Leadership gets a monthly summary and a regular security review |
Who should book a FunctionOne security assessment?
FunctionOne works with established mid-size and large organizations that have outgrown a help desk.
Owners and executives
You report to a board, insurer, auditor or parent company. FunctionOne reports to leadership with owners and next steps.
IT directors with in-house teams
FunctionOne can work co-managed beside your IT team.
Leaders with several offices
FunctionOne runs offices, laptops, phones, servers and cloud from a single control point. The scope step confirms all your locations.
Teams with high-stakes operations
Your leadership names the critical operations during scoping, so analysts know what matters most to you.
Questions leaders ask about the FunctionOne security assessment
What does a FunctionOne security assessment review?
A FunctionOne security assessment reviews your systems and accounts. We then confirm the devices, identities, locations and data sources in scope, and your leadership names the critical operations. After that, we agree the response rules with you before anything is switched on.
How do I book a cybersecurity assessment with FunctionOne?
You can book a FunctionOne cybersecurity assessment through the form on this page or by calling 315-437-6714. The form asks for your name, work email, company and company size, and a phone number is optional. We use your details only to arrange the assessment.
Why does FunctionOne start with an assessment?
FunctionOne starts all new clients with a security assessment so nothing gets switched on before you've agreed to it. We review your systems and accounts first, then set the scope and response rules with you. Our analysts act only within the rules you approve.
Will FunctionOne switch anything on before we agree?
No. FunctionOne doesn't switch anything on until we've reviewed your systems and accounts and agreed the scope and response rules with you. Security analysts watch connected systems around the clock, and they contain threats only within the response rules you approve.
Why do leaders need a security risk assessment for business?
A FunctionOne security assessment gives leaders facts to act on. In its Guide for Conducting Risk Assessments (SP 800-30 Rev. 1, 2012), NIST defines risk assessment as identifying, estimating and prioritizing information security risks, so senior leaders have the information to choose a response.
Is there a standard baseline for business cybersecurity?
Yes. In Cross-Sector Cybersecurity Performance Goals 2.0 (2025), CISA sets voluntary practices as a baseline for businesses of all sizes, grouped under Govern, Identify, Protect, Detect, Respond and Recover. A FunctionOne security assessment starts with a review of your systems and accounts.
Does FunctionOne offer security assessments in Syracuse and Tampa?
Yes. FunctionOne works from offices at 6216 Thompson Road in Syracuse, New York, and 401 East Jackson Street in Tampa, Florida. The Syracuse office opened in 1992, and Tampa is now open. You can reach both offices at 315-437-6714.
Sources
- FBI IC3, 2025 Internet Crime Report, 2026
- CISA, Cross-Sector Cybersecurity Performance Goals 2.0, 2025
- NIST, The NIST Cybersecurity Framework (CSF) 2.0, 2024
- NIST, Guide for Conducting Risk Assessments (SP 800-30 Rev. 1), 2012