Full network scan + vulnerability report.
Configured, tested, and documented.
Ongoing monitoring + monthly report.