Executive summary
Example Precision Engineering is a 34-person manufacturer whose production, quoting and invoicing depend on a cloud ERP and Microsoft 365. Overall, the business has a reasonable technical foundation but three high-priority gaps that together create a realistic risk of losing money to payment fraud and of a production outage lasting more than a week.
Systems
Medium
Money
High
Operations
High
Top five priorities
| # | Risk | Area | Priority | Effort to fix |
|---|---|---|---|---|
| 1 | Supplier bank-detail changes are accepted by email without a call-back | Money | High | Low |
| 2 | MFA is not enabled for 7 of 31 email accounts, including two directors | Systems | High | Low |
| 3 | Backups have never been test-restored; the newest copy is on the same network | Operations | High | Medium |
| 4 | Four former employees still have active accounts | Systems | Medium | Low |
| 5 | No agreed plan for running production if the ERP is unavailable | Operations | Medium | Medium |