Security best practices.
Most attacks succeed because something basic was missed. We put the fundamentals in place, check them against a recognised baseline and keep them from drifting.
What’s included.
Identity
- Multi-factor sign-in on every account
- Password managers and passkeys
- Admin rights only where needed
- Access removed the day someone leaves
Devices and software
- Patching for operating systems and apps
- Disk encryption on laptops and phones
- Endpoint protection
- Only approved software allowed to run
Policy and proof
- Security policies written in plain language
- Reviews against baselines such as the Essential Eight
- Answers for insurer and client questionnaires
- SSL certificates and email authentication checked
How it works.
-
Assess
We check your current setup against a recognised baseline.
-
Prioritise
You get a short list ordered by risk and effort.
-
Implement
We make the changes with your team and explain what is different.
-
Review
Regular checks make sure the settings have not drifted.
Further reading
- lesson Beginner 2 min read What is an SSL certificate? An SSL certificate proves a website belongs to its domain name and lets browsers encrypt the connection. Who issues one, and why it expires.
- lesson Beginner 3 min read What is HTTPS? HTTPS is the encrypted way a browser talks to a website. What it protects for your visitors, what it does not, and how to turn it on.
- lesson Intermediate 3 min read Encryption vs hashing: what’s the difference? Encryption can be reversed with a key. Hashing cannot be reversed at all. What each is for, and which one should protect what.
Related
- Essential Eight The Australian Signals Directorate’s eight strategies, assessed, put in place and kept in place.
- Identity & Access Management One sign-in for each person, the access their role needs and nothing more, removed the day they leave.
- Security Awareness Practical training and phishing simulations that teach staff to spot the trick.
- Email domain check SPF, DKIM and DMARC for your domain: can somebody else send email in your name?
Tell us what needs sorting.
Book a call or send an email. We reply within one business day.