CYBERSECURITY FOR SMALL AND MEDIUM-SIZED BUSINESSES
Protect your business data.
Keep your business running.
Security matters to smaller businesses too. Customer data, documents and email need protection, and an unavailable system can bring everyday work to a halt.
We help set priorities and implement safeguards in stages. Our plan includes a security assessment before changes and a check after implementation. We agree the scope, costs and impact on your business before work begins.
START WITH WHAT MATTERS
Protection tailored to how your business works
Important data under control
We identify who needs access to customer data, business files and email, and choose safeguards to match those needs.
Prepare for downtime
We organise backups and recovery procedures, and check whether the plan can be used in practice.
Justified spending
We make use of what already works. We select commercial and open-source solutions according to your priorities and ability to maintain them.
IMPLEMENTATION STEP BY STEP
From understanding your business to ongoing protection
The process covers an initial assessment, implementation of safeguards and a check of their effectiveness. At each stage, you know what we are doing and what comes next.
Understand your business
We identify what needs protection.
Assess security
We identify weaknesses before making changes.
Set priorities and plan
We agree the work, tests and budget.
Implement in stages
Changes follow the agreed plan.
Check effectiveness
We check protection after implementation.
Monitor and improve
Protection keeps pace with changes in your business.
Stage 01
Understand your business
We discuss how you work, your important data and systems, and the impact of potential downtime. We agree the scope and cost of the security assessment, testing arrangements, responsible people and constraints on day-to-day work.
What you receive: An agreed assessment and testing scope, and a list of the data and services that need protection.
Stage 02
Assess security
We review the current protection of your data and systems, identifying weaknesses and what already works well. The results help us select the safeguards you need and assess the effect of changes later.
What you receive: An assessment of current protection and a list of issues to address.
Stage 03
Set priorities and plan
We assess how the identified issues affect your business and propose the order of work, solutions and costs. We also define the intended results and how we will check the effectiveness of the safeguards after implementation.
What you receive: An implementation and follow-up verification plan, with a budget for your approval.
Stage 04
Implement in stages
We start with approved priorities. We agree when changes will take place, make sure the previous configuration can be restored and test solutions before extending them across the environment.
What you receive: Implemented safeguards and a record of changes made.
Stage 05
Check effectiveness
After the changes, we check whether the safeguards work as planned and identified issues have been resolved. We discuss the results and any further steps, and provide documentation and guidance for your team.
What you receive: Check results, recommendations and documentation for day-to-day use.
Stage 06
Monitor and improve
Within the agreed scope, we analyse alerts, maintain updates and review risks periodically. After significant changes to your environment, we reassess the security testing needed. We use monitoring, test and review results to guide further improvements.
What you receive: Agreed ongoing support, review results and next priorities.
We base the proposed process on NIST CSF 2.0 to organise objectives and risks, and on CIS Controls to select practical safeguards. Scope and priorities reflect your business needs. IG1 is a starting point; additional safeguards are selected for identified risks.
PRACTICAL PROTECTION
What can an implementation cover?
We select the scope after understanding your needs. The areas below are examples, not a mandatory shopping list.
Accounts and access
Data permissions, stronger sign-in and organised access for employees and administrators.
Computers and servers
Updates, security configuration and monitoring of agreed devices and services.
Network and remote work
Network segmentation, traffic control and secure remote connections. Where appropriate, UTM as well.
Backups and recovery
Organising backups, restricting access to them and checking recovery within the agreed scope.
Team and documentation
Clear rules for using safeguards, reporting suspicious events and contacting the right person when problems occur.
Monitoring and response
Agreed alerts, responsibilities and actions when irregularities are detected.
SECURITY VERIFICATION
Testing before implementation and after changes
We check your protection before implementation and after changes. We carry out the tests, including penetration tests, ourselves. We tailor their scope to your business needs and agree it before work begins.
You receive clear results, information on the effectiveness of fixes and recommendations for ongoing protection.
Where justified, we agree the involvement of an additional specialist with you in advance.
A CONCRETE RESULT
Know what is protected and what to do if a problem occurs
You receive a protection plan, a record of changes and test results. You know what has been improved, what further action is needed and who is responsible for ongoing support.
Our goal is to reduce exposure to threats and support business continuity without disrupting your processes.
QUESTIONS AND ANSWERS
What should you know before starting?
Do I need to replace all my equipment?
We do not assume that in advance. We first review your current environment. We use solutions that meet your requirements and recommend replacement where justified by risk, lack of support or technical limitations.
What is UTM?
UTM is integrated network protection. It combines several security functions in one device or solution, such as a firewall, filtering of dangerous traffic, detection of attack attempts and secure remote connections. The functions depend on the chosen solution and configuration.
We help choose appropriate functions and configure them to support protection of your business network.
More information: Fortinet’s explanation of unified threat management.
Are backups alone enough?
Backups help restore data, but do not replace access controls, updates and other safeguards. It is also important to check that backups are separated from the affected environment and that the necessary information can be restored from them.
How do you choose solutions and manage costs?
We consider your needs, risks, existing equipment and ability to maintain the solution. We use proven commercial products and mature open-source solutions, which can reduce licence costs. Before implementation, we also explain configuration, maintenance and any subscription costs.
Let’s decide where to start in your business
Tell us about your environment, important data and concerns. We will propose a next step and a scope of work to agree.