Strategic Alignment Suite · Enterprise tier

See your network the way an outsider would.

Networks accrete. Switches get added under desks, VLANs multiply, firewall rules outlive the person who wrote them. Our network audit maps what's actually there, compares it against how it's documented and how it should look, and hands you a prioritised uplift plan you can action or ignore, either way, you'll know.

Full topology mapping
Independent, vendor-neutral audit
Prioritised uplift plan
Documented, audit-ready output
Independent
Vendor-neutral audit, whether or not you're a synfo client already.
Documented
Every device, VLAN and firewall rule mapped and recorded.
Prioritised
Findings ranked by risk and cost, not listed alphabetically.
Board-ready
An uplift plan written to be approved, not just read.
The business case

Why this belongs on the governance agenda.

The network is the layer everything else depends on, yet it's often the least documented part of the environment. An independent audit turns tribal knowledge into a record leadership can actually govern, budget against and hand to an auditor or insurer without a scramble.

You can't secure or scale what isn't documented.

Undocumented VLANs, orphaned firewall rules and unmanaged switches are risk hiding in plain sight. You can't make a good decision about the network without first knowing, precisely, what it actually looks like.

Undocumented networks are an audit and insurance liability.

Cyber insurers and compliance auditors increasingly ask for network documentation and segmentation evidence as standard. A network that exists only in one engineer's head is a liability the moment that person leaves.

Uplift plans need a business case, not just a diagram.

A list of findings without a cost and a priority order isn't actionable. Our uplift plans are built the way a budget proposal needs to look: ranked, costed and sequenced.

What we audit

From current state to prioritised uplift.

A network audit covers the layers that actually determine performance, resilience and risk, not just a ping sweep and a device list.

Physical & logical topology mapping

Every switch, router, firewall, access point and VLAN mapped as it actually exists, cross-checked against whatever documentation currently exists, if any.

Firewall rule & segmentation review

Rule sets reviewed for redundant, overly permissive or simply forgotten entries, and network segmentation assessed against how well it actually isolates critical systems.

Wireless & access layer audit

Coverage, authentication methods and guest network isolation reviewed against best practice, with particular attention to how guest and staff traffic are kept apart.

Redundancy & single-point-of-failure analysis

Every place a single failed device or link would take down the network, or a critical part of it, identified and ranked by business impact.

Capacity & performance review

Bandwidth, latency and device load assessed against current and near-term demand, so growth doesn't quietly outpace the infrastructure underneath it.

Documentation & handover

A finished set of topology diagrams, device inventories and configuration notes, handed over in a format your team, or ours, can maintain going forward.

What you receive

The deliverables at the end of every network audit.
  • Current-state topology diagramsPhysical & logical layers
  • Findings registerRanked by risk, not raw volume
  • Prioritised uplift roadmapCosted & sequenced
  • Device & firmware inventoryWhat's running, and how current
  • Firewall rule reviewRedundant & risky rules flagged
  • Executive summaryBoard and budget-ready
  • Vendor-neutral recommendationsNo bias toward any one platform
  • Portable outputAction it yourself, or with us
FAQ

Common questions on network audits.

How long does a network audit take?
It scales with your site count and complexity. A single-site environment is a short engagement; a multi-site or multi-vendor estate takes longer. We scope and quote the timeframe up front once we understand your environment.
Do you need admin access to our network?
Read-only access is usually enough to map topology, configuration and rule sets. We request the minimum access needed to do the assessment properly and agree the access model with you before starting.
What do we get at the end?
A current-state topology diagram, a findings register ranked by risk, and a prioritised, budgeted uplift plan you can action yourself, hand to another provider, or bring to synfo to deliver.
Can you audit a network someone else manages?
Yes. The audit is run independently and is not conditional on switching providers. Many clients use it specifically as a second opinion on a network managed by another IT provider.
How does this connect to Project Strategy & Road-mapping?
The audit's findings register and uplift plan feed directly into a wider technology roadmap where one exists. See Project Strategy & Road-mapping. Network uplift is rarely an isolated project; it usually competes for the same budget and sequencing as everything else on the roadmap.

Find out what's actually running on your network.

Start with a discovery call. We'll talk through your current environment, what's documented, what isn't, and what a full audit would cover.