Home Services TetharaTM Pricing Insights Resources Contact
Cyber Readiness Review · Business IT · OT · Identity · AI Governance

Cyber Readiness
IT + OT

MDHG advises business leaders on cyber risk across business IT and operational technology, then helps prioritise practical actions for identity, AI governance, and resilience.

IT Risk
Identity, email, cloud, and supplier exposure create practical business risk
Governance
Cyber risk requires practical controls, ownership, evidence, and executive accountability
Identity Security
MFA coverage, administrator access, and sign-in controls to reduce account takeover risk
OT Security
Operational environments need risk reduction that respects uptime, safety, and business continuity
Front-Door Offer
Cyber Readiness Review
Before Projects, Tools or Remediation

The review gives leadership a practical starting point: what is exposed, what could hurt or disrupt the business, what should be fixed first, and which specialist path should follow.

Operational Readiness Where Relevant
IT/OT separation, vendor access, segmentation, uptime, and recovery readiness
  • Review how operational systems connect to business IT, vendors, remote access, and internet-facing risk
  • Prioritise segmentation, visibility, backup, recovery, and incident-readiness improvements
  • Reduce operational cyber risk without ignoring uptime, safety, and site constraints
View OT Readiness Path →
Business IT Security Readiness
Everyday Business Systems
Can Carry Serious Cyber Risk

Most business cyber risk does not start in a factory or plant. It starts with everyday systems: staff accounts, email, cloud tools, supplier access, administrator permissions, endpoint devices, backup gaps, and unclear recovery priorities. MDHG helps leadership see where these exposures could disrupt operations, client trust, and decision-making, then prioritise what should be fixed first.

◈
Identity and Access
Review stolen-credential risk, weak MFA coverage, shared administrator access, privilege sprawl, and unclear joiner/mover/leaver controls.
▧
Email and Cloud Exposure
Assess mailbox compromise risk, unsafe file sharing, weak cloud configuration, poor audit visibility, and gaps in recovery planning.
▦
Supplier and Remote Access
Review third-party access, remote support paths, unmanaged tools, vendor accountability, and exposure created by outsourced systems.
⬡
Endpoint, Backup, and Recovery
Check whether laptops, servers, backups, and recovery steps are ready if accounts, systems, or business data are disrupted.
Specialist Paths After the Review
One Clear Starting Point.
The Right Path After That.

The Cyber Readiness Review is the front door. These specialist paths are used when the review shows a specific area needs deeper attention.

⬡
Start with a clear view of exposure, business impact, and what to fix first.
◈
Assess AI-related risks and governance controls as AI adoption accelerates across your organisation.
⬟
Exposure Prioritisation
Separate urgent business risk from technical noise so remediation happens in the right order.
◈
MFA coverage, privilege review, administrator access, sign-in controls, and practical rollout planning.
▦
Review firewall exposure, segmentation, remote access paths, vendor connectivity, and network controls across IT, cloud, and operational environments.
◆
Continuously identify, prioritise, and reduce attack surface exposure across internet-facing assets, identities, and critical systems.
⬟
Review OT/ICS security maturity, segmentation, remote access, visibility, and practical risk reduction without disrupting operations.
▧
Translate technical findings into business risk, control priorities, executive reporting, and clear remediation ownership.
◇
Third-Party & Supplier Risk Review
Assess supplier, remote access, and outsourced technology risks that can affect operations, data, and client trust.
⬢
Security operations support for monitoring, triage, incident visibility, and faster response to suspicious activity across your environment.
▣
Remediation Roadmap & Advisory
Prioritised action plan - immediate wins, short-term fixes, long-term strategic horizons.
Why MFA Matters
Passwords Alone Are
No Longer Enough

Modern attacks target identity first. MFA adds an essential verification layer between stolen credentials and business systems, and stronger phishing-resistant methods materially reduce the chance of unauthorised access. MDHG supports practical MFA planning and rollout for businesses, using suitable platforms where appropriate.

Why It Matters
The Value of MFA
  • Reduces the risk of account takeover when passwords are stolen or reused
  • Helps defend against phishing, malware, and ransomware-driven access attempts
  • Supports zero trust and stronger access control across cloud and on-prem systems
  • Improves compliance posture and helps satisfy insurer and audit expectations
Business Impact
The Risk of Not Having MFA
  • A single compromised password can expose email, finance, HR, and operational systems
  • Attackers can exploit weak login flows through phishing, SIM swapping, or MFA fatigue tactics
  • Recovery after an identity-led breach is costly, disruptive, and reputationally damaging
  • Organisations without strong authentication are easier targets for repeat compromise
From Assessment to Action
Practical Support
After the Gaps Are Clear

Once a Cyber Readiness Conversation or focused advisory review highlights the gaps, MDHG helps businesses prioritise and reduce risk through advisory, implementation, remediation, and governance support.

Governance
AI Governance Advisory
Create usable controls for AI, data handling, and accountability.
  • Review AI tool use, personal information exposure, and staff guidance gaps
  • Design practical AI acceptable-use and data-handling controls
  • Support AI governance, vendor review, and executive reporting
  • Help leadership move from policy intent to practical adoption
Learn About AI Governance →
What We Solve
The Two Risks
SA Businesses Can't Ignore
Cyber Governance Requires Practical Controls
Businesses need practical controls, clear ownership, and usable evidence around cyber risk. MDHG helps leadership understand where governance gaps sit and which actions need priority attention.
  • Cyber governance and accountability review
  • Security compromise readiness and notification planning
  • Governance documentation and control gap review
  • Cyber insurers increasingly expect documented security controls
  • ISO 27001, NIST, and CIS compliance gap mapping included
What Our Governance Review Covers
A structured review of your cyber governance posture, technical controls, and evidence gaps - delivered in plain language leadership, IT, and insurers can use.
  • Business-critical data and system-flow review
  • Access controls and data minimisation review
  • Incident response procedure assessment
  • Third-party supplier and access-risk review
  • Employee awareness and training gap analysis
  • Remediation roadmap: immediate, 30-day, and 90-day actions
Your Staff Are Using AI. Do You Have Control?
As AI tools become easier to access, employees may use them without clear business oversight. The risk is real, but the fix should be practical.
  • AI tool use can create hidden data handling and governance risk
  • Finance staff pasting client data into public AI can create confidentiality and governance exposure
  • HR teams drafting contracts in AI tools may expose employee personal information
  • Banning AI is not the answer - governing it is
  • AI adoption still needs clear ownership, approved tools, and usage boundaries
The AI Governance Readiness Program - What You Get
A practical AI governance implementation: from tool audit to policy to training and control design - delivered in 2–4 weeks with clear business and compliance outcomes.
  • Full AI tools audit across all departments
  • Written AI Acceptable Use Policy (branded to your business)
  • Role-specific staff workshops - finance, sales, ops, HR
  • Enterprise AI tool selection and governance guidance
  • Data handling, approval, and usage control framework
  • Board-ready AI risk and governance reporting
How It Works
Our 4-Step Approach

Focused scoping, practical review, and clear findings without unnecessary enterprise complexity.

01
Engage
Scope & Context
A focused scoping call to define environment boundaries, priorities, and your specific business context. We understand your threat landscape before we assess it.
02
Assess
Focused Review
Review the agreed focus areas using proven frameworks, then turn findings into practical next steps leadership can act on.
03
Analyse
Cross-Domain Findings
We correlate findings across all domains to surface real exposure and critical gaps that matter most to your business - not just a checklist of technical issues.
04
Deliver
Clear Roadmap
A findings report and prioritised remediation plan in plain language - no jargon, no fluff. Immediate wins, short-term fixes, and long-term strategic horizons.
Why MDHG
Built for Results
◈
Fast Clarity
Rapid, thorough assessment. No lengthy discovery phases or enterprise red tape. You get answers fast.
◈
Cyber Insurance Readiness Support
Prepare clearer evidence for cyber-insurance and client security questionnaires without assuming insurer approval or premium reduction.
◈
Identity-Centric Defence
Strengthen the control plane attackers target most: accounts, access, MFA coverage, and risky sign-in exposure.
◈
Expert Guidance
Governance, architecture, and deep technical expertise combined in one rapid engagement. No switching between vendors.
◈
Prevention & Mitigation
Proactive strategies plus thorough containment and recovery roadmaps - before and after an incident.
◈
SA-Native Context
South Africa-focused. We understand the local threat landscape, cost constraints, and compliance environment that generic global firms miss.
What You Receive
✓
Executive Summary with risk overview and business context
✓
Plain-language findings with technical detail where useful
✓
Prioritised remediation roadmap - immediate, short & long-term
✓
Top risks ranked by business impact and urgency
✓
Control and evidence gaps where they affect business, clients, insurers, or governance
✓
Actionable next steps your team can implement immediately
✓
Governance and control evidence summary
✓
Cyber-insurance and client-questionnaire support where relevant
Founder-Led Advisory
Cyber Readiness Guidance
With Business Context

MDHG is led by Moezelle Harvey, a cybersecurity specialist focused on IT, OT, identity security, AI governance, and practical risk reduction for South African organisations.

What This Means for Clients
✓
Clear guidance instead of unnecessary complexity
✓
Business-risk language leadership teams can understand
✓
Practical cyber readiness, Identity Security, Network Security, AI governance, and remediation support
✓
South African business context with practical cyber advisory
Pricing
Cyber Readiness Review
and Advisory Paths

Start with a practical review, then choose the right advisory or remediation path based on the risks that matter most.

All pricing is excluding VAT where applicable. Third-party software, licensing, travel, site work, and vendor costs are quoted separately based on your environment and requirements.
Business Cyber Readiness
For organisations that need a practical view of exposure, priority actions, and cyber risk ownership without unnecessary enterprise complexity.
OT & Industrial Cybersecurity
For organisations with operational technology, industrial systems, facilities, plants, sites, engineering environments, or critical business operations.
Business IT
Cyber Readiness Review
From R6,500
once-off

A practical entry-level assessment to identify your biggest cybersecurity gaps and give you a clear improvement roadmap.

  • Discovery session
  • Basic cyber risk review
  • MFA and access security review
  • Email and domain security checks
  • Backup and recovery readiness questions
  • Top risk summary
  • 30-day improvement roadmap

Book a Readiness Review →
Identity & access
Identity Security Rollout
From R12,500
per project

Planning and implementation support to help your business roll out stronger access protection without disrupting operations.

  • Access risk assessment
  • MFA rollout planning
  • Admin account protection guidance
  • User onboarding support
  • Basic access policy recommendations
  • Optional support for suitable MFA platforms
  • MFA platform licensing quoted separately

Secure Business Access →
Monthly advisory support
Cyber Foundation Retainer
From R7,500
per month

Monthly cybersecurity oversight for businesses that want practical support, prioritisation, and risk reduction without a full-time security hire.

  • Monthly cyber risk check-in
  • Security advice and prioritisation
  • MFA and access review guidance
  • Network security and segmentation guidance
  • Basic policy templates
  • Vendor and tool guidance
  • Monthly executive summary

Start Monthly Cyber Support →
IT/OT assessment
IT/OT Security Assessment
From R35,000
once-off

A deeper assessment for organisations with plants, sites, industrial systems, critical operations, or connected IT and OT environments.

  • IT/OT architecture review
  • Network segmentation review
  • Identity and remote access review
  • Critical asset and process mapping
  • Exposure and vulnerability prioritisation
  • Incident readiness review
  • Executive report and roadmap

Review IT/OT Risk →
Executive cyber advisory
vCISO / Cyber Readiness Advisory Partner
From R25,000
per month

Executive-level cybersecurity guidance for organisations that need governance, risk oversight, board-ready reporting, and long-term security direction across IT and OT.

  • vCISO-style advisory
  • IT and OT risk governance and roadmap tracking
  • Executive and board-level reporting
  • Cyber risk register guidance
  • Supplier and vendor access guidance
  • Incident readiness planning
  • Security architecture review support

Talk to MDHG →
Prices are starting points and may vary depending on business size, number of users, systems, locations, production environments, risk profile, and required support level. OT engagements are scoped carefully to respect safety, uptime, site access, and operational constraints. Third-party MFA platform licensing is quoted separately.
Not sure which package fits your environment?
Book a Cyber Readiness Conversation with MDHG to understand whether your priority is business IT security, OT cyber security, identity, AI governance, network segmentation, or executive cyber risk oversight.
Book a Cyber Readiness Conversation →
Get Started Today
Focus on the Risk That Matters.
Act With a Practical Roadmap.

Book a Cyber Readiness Conversation with MDHG to clarify whether your priority is Business IT Security, OT Cyber Security, Identity Security, AI Governance, Network Security, or executive risk visibility.

Business IT
OT Cyber Security
Identity Security
AI Governance
Book a Cyber Readiness Conversation → Explore IT & OT Services
Visibility
Know Your Exposure
Prioritisation
Fix What Matters Most
Execution
Act With Confidence