SYSFACTS
PROXMOX HARDENING
FRAMEWORK

How far is your cluster
from the control catalog?

74 controls across six building blocks, aligned with BSI IT-Grundschutz and ISO 27001. At the end you know what is missing, what it costs and in which order.

01 — THE RESULT

Six pages.
Every finding with a way forward.

The report assesses each building block separately and weights it. An excerpt from pages two and three:

SAMPLE REPORT
HARDENING REVIEW · 01 — SUMMARY FOR MANAGEMENT

The environment runs stably. It is not audit-ready yet.

62 OUT OF 100 POINTS MATURITY
Access & roles41
Host & firmware78
Segmentation & management47
Backup & encryption58
Update procedure81
Documentation & check runs38
MATURITY 62 — A GOOD STANDARD, BELOW THE THRESHOLD FOR LEVEL 02 REGULATED
CONTROLS46 / 74met, 19 partly, 9 open. No finding puts current operations at risk.
MATERIAL DEVIATIONS4They concern identity, network segmentation and evidence.
TO SIGN-OFF READY14 daysIn four work packages, each one commissionable on its own.

These figures come from a sample report. Yours will read differently, the structure stays the same: a summary for management, the result per building block, a prioritized list of deviations, an action plan and the basis for it all.

02 — HOW IT RUNS

Three steps to the report.

Depending on size the assessment takes three to five days. We change nothing in your environment, we look at it.

STEP 01

Recording

Configuration recorded per node, conversations with your operations team and technical verification on site or over a secured connection.

STEP 02

Assessment

Every control gets met, partly or open. Every finding points to the requirement behind it, so that it holds in the audit.

STEP 03

Action plan

The findings become work packages, sorted by effect and quantified by effort. You decide which of them you commission.

03 — YOUR DETAILS

You fill in the header.
We deliver the six pages behind it.

Nine details are enough for a firm quote. Leave anything you do not have to hand.

We reply within one working day. How we handle your details is set out in the privacy policy (German).

Rather talk first? +49 221 670572 0 or 30 minutes, no obligation.

WHERE WE STAND

A report that only finds good news
helps nobody.

We also write down what is missing, and we say what it costs. In the audit only what can be evidenced counts, not what was well intended.

Proxmox® and the Proxmox logo are registered trademarks of Proxmox Server Solutions GmbH. Sysfacts GmbH is an official reseller partner of Proxmox Server Solutions GmbH.