Cybersecurity

Assess before you buy anything

A security assessment establishes what you have, what is exposed and what an attacker would try first. It produces a prioritised list where each item names the risk, the fix, the effort and whether the fix is already covered by a licence you hold. Most organisations find their first ten actions cost nothing but configuration time.

Identity, email and endpoints

These three carry the majority of real-world incidents. Multi-factor authentication and conditional access on identity; anti-phishing, impersonation protection and safe attachments on email; managed, encrypted and patched devices on endpoints.

• Multi-factor authentication and conditional access
• Privileged account review and separation
• Email authentication — SPF, DKIM and DMARC
• Anti-phishing and impersonation protection
• Endpoint protection, encryption and patching
• Removable media and data loss policies

The people layer

Awareness training that uses examples from your own sector, followed by simulated phishing so you can measure whether it worked. Finance teams get a specific session on payment-diversion fraud, which is the single most expensive attack pattern we see locally.

When something does happen

We help you prepare an incident response plan before you need it: who is called, who speaks to clients and regulators, how systems are isolated, and how you restore. A tested backup is the last line, and we make sure it is real.