Cyber security assessment to assess vulnerability to external threats. Review to include vulnerability scans and penetration tests with recommendations on actions to be taken to reduce risk and how to assess ongoing cyber threats as part of IT policy and procedures