Package 1
Microsoft 365 health check
Identity and access, security configuration, device management, sharing/DLP, licence utilisation – and AI readiness before Copilot is switched on.
See what's included
Who it is for
Organisations that want to know whether their Microsoft 365 environment is securely set up, properly governed – and whether the licences are actually being used.
What we assess
- Identity and access – Entra ID, MFA, Conditional Access, privileged accounts, inactive guest accounts, enterprise applications, service principals and managed identities
- Security configuration – alignment with good practice (Maester and ZTA), Microsoft Defender, alerting
- Device management – Intune, compliance policies, update regime
- Sharing and exposure – Teams, SharePoint/OneDrive, external sharing, Exchange and Purview/DLP policies
- Licence utilisation – what you pay for, what's used, and where they differ
- AI readiness – access and data foundations before Copilot and other AI tools are switched on: sharing, labels and who can reach what
- 15–100 users
- 29 000
- 101–250 users
- 39 000
NOK excl. VAT
Done: You know what is safe, what needs tightening – and which licences you're paying for but not using.
Book 20 minutes Coldbyte platform as analysis tool · Azure consumption cost extra (est. NOK 1 500/month during the analysis period)
Package 2
Azure health check
Architecture and landing zone, security, networking, backup/DR, cost picture – and AI workloads with access, data and cost control.
See what's included
Who it is for
Organisations with workloads in Azure that want an independent assessment of security, resilience and cost.
What we assess
- Architecture – landing zone, resource organisation, governance (policy, RBAC)
- Security – Defender for Cloud, identity, network protection, exposed services
- Networking – segmentation, connectivity, name resolution
- Resilience – backup, restore and DR capability
- Cost picture – consumption profile, obvious anomalies and optimisation candidates
- AI workloads – use of Azure AI services: access control, data foundations, security and cost control
- 15–100 users
- 39 000
- 101–250 users
- 49 000
NOK excl. VAT
Done: You know whether your Azure environment is secure, resilient and correctly priced – and what to do first.
Book 20 minutes Senior infrastructure/security engineer, with the Coldbyte platform as analysis tool · Azure consumption cost extra (est. NOK 1 500/month during the analysis period)
Package 3
On-premises AD and network health check
AD hardening and tiering, legacy protocols, segmentation, firewall, exposure – and the access AI agents will inherit.
See what's included
Who it is for
Organisations with on-premises infrastructure that want to know how vulnerable Active Directory and the network really are – before someone else finds out.
What we assess
- Active Directory – privileged accounts and tiering, GPO, legacy protocols, hardening
- Identity infrastructure – synchronisation to the cloud, PKI where relevant
- Networking – segmentation, firewall rules, remote access
- Exposure – what is visible from the internet, and what is left open internally
- Operations – patching, backup of critical components, restore capability
- AI readiness – access, accounts and data that AI services and agents will inherit from today's AD and network
- 15–100 users
- 49 000
- 101–250 users
- 69 000
NOK excl. VAT
Done: You know where AD and the network are vulnerable – and what to close first.
Book 20 minutes Senior infrastructure/security engineer
Package 4
Gap analysis / readiness
NSM basic principles, ISO 27001, ISO 42001, NIS2 or DORA – maturity, gaps and a prioritised roadmap. Variant for outsourcing and third-party risk.
See what's included
Who it is for
Organisations that must meet a framework or regulatory requirement – and want to know where they stand, what's missing and in which order to close it.
What we assess
- Choice of framework: NSM basic principles, ISO 27001, ISO 42001 (AI management system), NIS2 or DORA
- Maturity assessment against the requirements – documentation, practice and compliance
- Gap overview with risk assessment per area
- Prioritised roadmap – order, ownership and estimated effort
- AI maturity – organisation and accountability, data and value assessment, technical access and regulatory requirements (AI Act, ISO 42001)
- Variant: outsourcing and third-party risk – supplier register, exit strategies, concentration risk and governance (DORA/NIS2)
- NSM basic principles
- from 79 000
- ISO 27001 / 42001 / NIS2 / DORA
- 99 000 – 119 000
NOK excl. VAT
Done: You know where you stand against the requirements, what's missing – and the order in which to close it.
Book 20 minutes Senior advisor – PECB-certified ISO/IEC 27001 Lead Implementer
Package 5
FinOps assessment
Consumption, allocation to projects and departments, unit cost per user/customer/transaction – and AI cost (FinOps for AI). Not just cuts: control.
See what's included
Who it is for
Organisations that want control of cloud and licence cost – not just lower cost. The value lies as often in correct allocation as in cuts: who and what drives the cost, how it is split across projects, initiatives and departments – and what the unit cost is per user, per customer, per transaction. Sometimes the recommendation is to spend more, for example on stronger licences where the risk warrants it.
What we assess
- Consumption analysis – Azure consumption and M365/software licences
- Allocation model – cost split across projects, initiatives and departments (showback)
- Unit cost – cost per user, per customer, per transaction where data exists
- Recommendations – reduction, reallocation and deliberate increases where needed
- Basis for budget, forecast and financial governance of technology cost
- AI cost – spend on AI services and models, unit cost per use case and a basis for prioritisation (FinOps for AI)
- 15–100 users
- 35 000
- 101–250 users
- 45 000
NOK excl. VAT
Done: You know what technology costs, who it costs for – and whether the money is in the right place.
Book 20 minutes Coldbyte platform as analysis tool · Azure consumption cost extra (est. NOK 1 500/month during the analysis period)
Package 6
Contract and licence review before renewal
Up to 3 contracts in the same complex: terms, lock-ins, pricing model against actual need, AI terms – and a recommended negotiation strategy.
See what's included
Who it is for
Organisations with a contract approaching renewal or expiry – a Microsoft agreement, an operations contract, an EA-to-CSP transition – that want to meet the vendor prepared.
What we assess
- Review of up to 3 contracts in the same contract complex
- Commercial terms – pricing model measured against actual need and consumption
- Lock-ins – term, exit conditions, price adjustment mechanisms
- Market picture – what comparable buyers achieve, and where the room for negotiation lies
- Recommended negotiation strategy with concrete demands
- AI terms – data use and training on your data, IP, liability and audit rights in the vendor's AI services
- Per contract complex
- 49 000 – 69 000
NOK excl. VAT
Option: Support in the negotiation itself – hourly, or as agreed.
Done: You meet the vendor with facts, requirements and a negotiation strategy.
Book 20 minutes Senior advisor with negotiation experience from both sides of the table
