Security best practices.
Most attacks succeed because something basic was missed. We put the fundamentals in place, check them against a recognised baseline and keep them from drifting.
What’s included.
Identity
- Multi-factor sign-in on every account
- Password managers and passkeys
- Admin rights only where needed
- Access removed the day someone leaves
Devices and software
- Patching for operating systems and apps
- Disk encryption on laptops and phones
- Endpoint protection
- Only approved software allowed to run
Policy and proof
- Security policies written in plain language
- Reviews against baselines such as the Essential Eight
- Answers for insurer and client questionnaires
- SSL certificates and email authentication checked
How it works.
-
Assess
We check your current setup against a recognised baseline.
-
Prioritise
You get a short list ordered by risk and effort.
-
Implement
We make the changes with your team and explain what is different.
-
Review
Regular checks make sure the settings have not drifted.
Further reading
- article 5 min read Why reusing passwords is still one of the biggest security risks One password used in several places means one breach opens several accounts. How stolen passwords get used, and what to do in place of reuse.
- article 5 min read Should your business make MFA mandatory? Yes, and Microsoft and Google have already made it so for administrators. What a mandatory MFA rule should cover, and how to bring it in.
- article 5 min read A cyber security checklist for small business A plain checklist based on the Australian Signals Directorate’s advice: accounts, devices, backups, access, staff and a plan for a bad day.
Related
- Essential Eight The Australian Signals Directorate’s eight strategies, assessed, put in place and kept in place.
- Identity & Access Management One sign-in for each person, the access their role needs and nothing more, removed the day they leave.
- Security Awareness Practical training and phishing simulations that teach staff to spot the trick.
- Email domain check SPF, DKIM and DMARC for your domain: can somebody else send email in your name?
Tell us what needs sorting.
Book a call or send an email. We reply within one business day.