Cyber Security
Layers that protect your devices, accounts and data: endpoint protection, multi-factor authentication, disk encryption and regular security scanning.
Who is it for?
- Businesses that suspect unauthorised access to an employee mailbox or company account, or that have been hit by phishing before.
- Businesses that have read about ransomware and are asking "what would we do if it happened to us?".
- Defence-industry suppliers whose customer or audit process requires a certain cyber security maturity level.
- Businesses moving to remote or hybrid work, where staff connect to company systems from home networks.
Common problems
- Relying on antivirus alone, with no mechanism to detect an attack by behaviour and isolate it automatically.
- Single-factor (password only) sign-in on most accounts, administrators included; MFA is absent or enabled on only some accounts.
- Disk encryption off on laptops, so data is directly readable if a device is stolen.
- The same local administrator password on every device, so learning one gives access to the others on the network.
What we do
Endpoint protection
Antivirus / EDR deployment and monitoring.
Identity and MFA
Account security, multi-factor authentication.
Disk encryption
Data is unreadable on a lost device.
Administrator password management
A unique, rotating password on every device.
Security scanning
Finding and prioritising weaknesses.
Hardening
Closing findings, standard configurations.
What we deliver
- A current-state assessment of endpoint protection, authentication and network configuration, with a findings report.
- Deploying an endpoint protection platform with EDR capability and configuring central monitoring and alerts.
- Rolling out multi-factor authentication gradually to all users, starting with critical accounts.
- Enabling disk encryption on all laptops and desktops and monitoring it centrally.
- Making local administrator passwords unique per device with automatic rotation.
- Periodic vulnerability scanning with a prioritised action list, a hardening checklist, a policy set (passwords, MFA, device use) and a summary report for management.
How we work
Scan
Current state and weaknesses.
Prioritise
A plan in order of risk.
Implement
Deploying the protection layers.
Monitor
Regular scanning and reporting.
Compliance link
EDR, disk encryption and regular scanning put endpoint security and update controls into practice. The service aligns with the encryption, access authorisation and attack detection and prevention items of the KVKK technical measures guidance; MFA and local administrator password management correspond to measures against unauthorised access. It follows the same direction as the access control and cryptographic controls of ISO 27001.
Our experience
From work planned and managed in large-scale enterprise environments.
Frequently asked questions
What is EDR, and how is it different from regular antivirus?
Antivirus detects known malware by signature. EDR monitors suspicious behaviour on the device and can isolate an attack automatically, so it adds a layer of protection against unknown or new threats.
Is MFA necessary, or is a strong password enough?
A strong password alone does not protect against a password that has been stolen or phished. MFA adds a second verification layer and reduces that risk significantly.
Why is disk encryption needed if my device already has a password?
A sign-in password does not stop someone removing the disk and attaching it to another computer. Disk encryption keeps the data unreadable even if the device is lost or stolen.
Why does local administrator password management matter?
If every device uses the same local administrator password, learning it on one device lets an attacker reach the others. A unique, regularly changing password per device removes that risk.
How is the cost of a cyber security service set for an SME?
Cost depends on the number of devices and users to protect, the state of the existing infrastructure and the level of protection wanted. The exact figure is settled after an initial assessment.
Platforms: Microsoft Defender, CrowdStrike Falcon, SentinelOne, Sophos, ESET, Bitdefender, Trend Micro, Kaspersky, Tenable, Qualys, CIS Benchmarks, BitLocker, FileVault, Windows LAPS, Microsoft Entra ID
Free discovery & consultation
Let us assess your needs together.