Security assessment
A practical review of identity, endpoints, email, network and backup, with findings ranked by real-world consequence.
06 / Practical security
Security that matches your real risk.
Small and mid-sized organisations are targeted precisely because their defences are assumed to be weak. The controls that prevent the overwhelming majority of incidents are not exotic — they are multi-factor authentication, current patches, tested backups, mail authentication and least-privilege access. We implement those properly, then build outward.
The problem
Where incidents actually start
Almost always with identity, email or an unpatched endpoint.
Common exposure
- Passwords reused across business and personal accounts
- No multi-factor authentication on email or administrative accounts
- Missing SPF, DKIM and DMARC, so your domain can be spoofed
- Local administrator rights on every workstation
- Backups on the same network as the data they protect
- No record of who has access to what
Controlled
- Multi-factor authentication enforced, with conditional access policies
- Managed endpoint protection with central visibility and response
- Mail authentication published and enforced against spoofing
- Administrative rights separated from daily-use accounts
- Immutable, offsite backup copies isolated from the production network
- Reviewed access registers and a tested incident response plan
Services
What we implement
Identity hardening
Multi-factor authentication, conditional access, privileged account separation and access reviews.
Endpoint protection
Managed detection on workstations and servers, with central visibility and response capability.
Email security
SPF, DKIM and DMARC, anti-phishing controls, and protection against impersonation of your own domain.
Network security
Firewall configuration and review, segmentation, and secure remote access.
Data protection
Encryption, retention, access control and handling aligned to POPIA obligations.
Backup & ransomware resilience
Isolated, immutable backup copies and a recovery process proven by test restore.
Awareness training
Short, practical sessions on the attacks your staff will actually encounter.
Incident response
A written plan, agreed contacts, and support during and after an incident.
Process
Assess
We review the environment against the controls that prevent the majority of real incidents, and report findings in business language.
Prioritise
Findings ranked by likelihood and consequence. The first few items usually remove most of the exposure.
Remediate
Controls implemented in order of impact, scheduled to avoid disrupting the business.
Verify
Configuration confirmed, restores tested, mail authentication validated. Verification is part of the work, not an optional extra.
Monitor & review
Ongoing monitoring, patching, access review and periodic reassessment as the environment changes.
Cybersecurity
Questions we are actually asked
Most attacks are not targeted. They are automated, and they find exposed accounts and unpatched systems regardless of company size. Smaller organisations are compromised more often precisely because the basic controls are frequently absent.
Works with
Managed IT
Day-to-day technology operations — support, monitoring, patching and vendor management — run to an agreed standard with a named contact.
Explore Managed IT ExploreCloud & Infrastructure
Cloud environments, identity, email and business continuity — designed for the workload, documented, and operated rather than merely installed.
Explore Cloud & Infrastructure ExploreSoftware & Systems
Business systems built around how your organisation actually works — replacing spreadsheets, email chains and disconnected tools with one connected platform.
Explore Software & Systems Explore
Tell us what is not working.
A short conversation is usually enough to tell whether this is the right capability for your situation — and we will say so if it is not.