Information Security

Small businesses often assume only large companies get hacked. In reality it’s the other way around: attacks on small companies are mass-produced and automated. Bots try passwords on exposed remote desktops around the clock, and ransomware arrives as attachments to emails “from the tax office”. An attacker doesn’t care who you are. What matters to them is an open port, a weak password and a missing backup.

We close these gaps before someone takes advantage of them.

Security assessment

We start by finding out where things really stand. Typical findings:

• remote desktop or other services exposed to the internet without a VPN;
• simple, reused passwords and accounts shared between several people;
• active access for employees who left long ago;
• operating systems and software missing security updates;
• backups stored on the same server as the data, or not made at all.

You receive a report on what was found, how dangerous it is and what to fix first.

Perimeter protection

• Firewall. We close everything that shouldn’t be reachable from the internet.
• Remote access only via VPN. No open ports for connecting to office computers and servers.
• Network segmentation. Guest Wi-Fi, cameras and work computers are isolated from each other, so one infected device can’t spread the infection across the whole network.
• Email protection. SPF, DKIM and DMARC setup and filtering of malicious attachments.

Antivirus protection

• Central management. Every computer is visible in a single console: where protection is running, where definitions are out of date, where a threat has been detected.
• Consistent policies across all workstations, with no protection switched off “because it was slowing things down”.
• Threat response. We’re notified when something is detected and investigate where the threat came from, rather than just deleting the file.

Scheduled backups

Backups are the last line of defense. If everything else fails, they’re what lets you get back to work. But only if they’re done right.

• Automatic and scheduled, without relying on someone remembering.
• The 3-2-1 rule: three copies of your data, on two different types of storage, one of them off-site.
• Ransomware protection. At least one copy can’t be modified from work computers, so ransomware that gets into the network can’t reach it.
• Regular restore tests. We don’t just check that a backup was created, we verify that data can actually be restored from it.

People and access

Most successful attacks don’t start with a hack. They start with an employee opening an email or entering a password on a fake website.

• Two-factor authentication for email, cloud services and remote access.
• Least-privilege access. Each employee has access only to what they need for their work.
• Prompt offboarding. Access is revoked as soon as someone leaves.
• Short, clear guidelines for staff on how to spot phishing and what to do when an email looks suspicious.

Incident response plan

We agree in advance on what to do if something does happen: who to notify, which systems to disconnect, where to restore from and in what order. In the middle of an attack, there’s no time to think it through.

How the work is structured

1. Assessment. We review your infrastructure and prepare a prioritized report.
2. Fixing what’s critical. First we close the gaps that could be used against you right now.
3. Putting protection in place. We set up the perimeter, antivirus, backups and access control.
4. Ongoing support. We keep up with updates, check backups and respond to threats, as a standalone service or as part of comprehensive IT outsourcing.

Who it’s for

• Companies that have never had their security checked.
• Those who’ve already dealt with a virus, ransomware or a hacked mailbox and don’t want it to happen again.
• Those whose staff work remotely and connect to office resources from home.