Cyber Security
Many attacks start with a phishing email, a stolen password or a vulnerability that was never patched. We put protection in place at exactly these points, on a scale that suits the size of your business.
Overview
It starts with an honest assessment. We look at your systems, user accounts, backups and network access and compare the current state with proven baseline standards. The result is a prioritised action plan: what comes first, what can follow later and how much effort each step involves.
We then implement the measures: next-generation firewall, endpoint protection with EDR, secured email, multi-factor authentication and a backup strategy that takes ransomware scenarios into account. We harden Microsoft 365 and other cloud services rather than leaving them on default settings. Since cameras, access control systems and building technology are part of your network too, we can include them in the concept on request.
Technology alone is not enough. We train your team to recognise phishing and draw up an incident response plan with you. If your organisation is covered by the EU's NIS2 Directive, we support you with the technical and organisational measures. The legal assessment of your specific case should be agreed with your legal advisor.
Scope of services
We review configurations, accounts and systems, scan for known vulnerabilities and derive an action plan that includes a patch strategy.
A firewall with application control, intrusion prevention and web filtering, plus clean network segmentation and VPN for secure remote access.
Protection for laptops, PCs and servers that detects suspicious behaviour and can isolate affected devices, combined with system hardening.
Spam and phishing filters, SPF, DKIM and DMARC, multi-factor authentication and hardened settings for Microsoft 365 and other cloud services.
A backup strategy based on the 3-2-1 rule, with offline or immutable copies and documented restore tests.
Training on phishing and social engineering, support with NIS2 readiness and an incident plan that defines who does what in an emergency.
How we work
Every project follows four clear steps. You have one fixed contact person and always know what happens next.
We gather your requirements, visit the site and review your existing systems.
You receive a concept with plans, a component list and a transparent quote.
We install and configure carefully, document everything and keep to the agreed schedule.
We stay with you after handover, with maintenance, updates and monitoring.
Unfortunately not. Many attacks are automated and hit any system they can reach, regardless of company size. Smaller businesses are often even easier targets because they have no IT department of their own. Just a few well-chosen measures such as MFA, current endpoint protection and a tested backup reduce the risk considerably.
NIS2 applies to organisations in certain sectors, usually above a certain size. Even if you are not covered yourself, customers may require comparable measures from you as a supplier. Whether you are affected should be checked by your legal advisor. We support you with the assessment and with implementing the measures.
For this case we draw up an incident response plan with you. It defines who is informed, which systems are disconnected first and how recovery works. It also takes possible reporting obligations into account, for example under the GDPR. In an emergency we support you with containment and recovery within the agreed scope.
We don't carry out penetration tests ourselves. We take care of vulnerability scans and configuration reviews. If a penetration test makes sense, for example before a certification or at a customer's request, we help you choose a specialist provider, agree the scope of testing and then implement the findings with you.
With this service we set up the security measures and hand them over with full documentation. With managed security we also take over ongoing operation afterwards: updates, monitoring, scans and regular reports. The two combine well.
Blog
Cyber Security
NIS2 covers far more companies than the old NIS Directive, either directly or through customers in the supply chain. Find out who is affected, what is required and how to start in a structured way.
Cyber Security
Today's phishing emails are often flawless and convincing. These twelve warning signs help your team recognise scams in time and respond correctly if someone does click.
Cyber Security
Passwords alone no longer protect business accounts. This guide shows which MFA methods suit SMEs, which accounts come first and how to roll out MFA without chaos.
Cyber Security
Before ransomware encrypts anything, attackers often go after the backups. Here is how to build a backup that survives such an attack and can actually be restored when you need it.
Whether it's one building or several sites: we listen, look at the situation on site and propose a solution that fits.
