All services Personalized Cyber Defence
Security built around how your business actually runs.
We start from what you do, what you depend on and what would hurt most if it stopped. Then we build a plan sized to your budget and team, and help you put it in place.
Architecture that contains an attack
Most breaches spread because everything can talk to everything. We design your network, identities and access so one compromised laptop stays one compromised laptop.
- SegmentationStaff, servers, guests and devices in separate zones.
- Identity firstMFA and single sign-on in front of everything that matters.
- Least privilegeAdmin rights only where and when they’re needed.
- Isolated backupsA copy attackers can’t reach, even with admin access.
What we help with
- Security architectureNetwork segmentation, identity, cloud and remote access, designed or reviewed.
- Risk assessmentWhere your biggest risks are, and which ones matter most to the business.
- Policies and governanceShort, practical policies your staff will read and follow.
- Incident preparednessResponse plans, playbooks and who calls whom.
- Tool selectionWhich security tools you actually need, and which you don’t.
- Ongoing adviceGuidance as your business and threats change.
Same question, different answers
“What should we do first?” depends on the business. Three examples:
- Busiest during tax season10-person accounting firm
- Offline, tested backups of client files
- MFA on email and the tax software
- Call-back rule for any payment change
- Product runs in the cloudSoftware company, 40 people
- Lock down cloud admin accounts
- Secrets out of code and laptops
- Logging that would show a breach
- Production can’t stopManufacturer, one plant
- Separate office and plant networks
- Remote vendor access with MFA
- A plan to run the plant if IT is down
Start from what would hurt most
For each critical system, we compare how long the business can live without it against how long recovery would really take. The gaps set the priorities.
Downtime you can tolerateRecovery time today (estimated)
- Tax and accounting softwareReturns stop, filing deadlines missedtolerable 1 d · today ~5 d
- Client files (office server)Staff can’t work on client filestolerable 2 d · today ~5 d
- Email (Microsoft 365)Clients can’t reach youtolerable 1 d · today < 4 h
- Payroll (online provider)Staff aren’t paid on timetolerable 3 d · today unknown
Top of the plan
- Run a timed test restore of the office server from backup, then keep one backup copy offline. Target: under one day.
- Get the payroll provider’s recovery commitment in writing.
Your plan, in order
- First 30 days
- MFA on email and remote access
- Backups checked and kept offline
- Next 90 days
- Patch policy in place
- Staff training on payment fraud
- This year
- Incident response plan tested
- Vendor access reviewed
How it works
- Scoping callWe agree on what is in scope, what is out, and what a good result looks like for you.
- The workThe expert who scoped it leads it, and keeps you posted on anything urgent.
- ReportFindings ranked by risk, with the fix for each, walked through with your team.
- Follow-upWe answer questions and check your fixes where it is part of the engagement.
When it makes sense
- You’re building a security programStart in the right order instead of buying tools first.
- You’ve found gapsAn audit, a scan or an incident showed problems, and you need a plan.
- You’re going through big changeGrowth, a merger, a new office or a move to the cloud.
- You need directionLots of advice, no clear priorities.
- Compliance is comingLaw 25, a client questionnaire, an insurer or an audit.
- You want to get ahead of riskFix things before an incident forces you to.
Examples on this page are illustrative.
Discuss Your Security Needs
Tell us what's going on. The expert who would lead the work replies within 1–2 business days, in English or French.