Assess
We inventory what is running, what it costs and where it is exposed. You keep the report.
Services
Cybersecurity
Assess what is exposed, fix what matters first, and be able to prove it.
What this covers
We start with an assessment against a recognised baseline, not a product pitch. You get a ranked list with effort and cost against each item.
- External exposure and configuration review
- Identity hardening: multi factor, conditional access, privileged account separation
- Endpoint detection and response deployment and tuning
- Email security, including SPF, DKIM and DMARC to enforcement
- Backup design tested by restore, not by the presence of a file
What you end up with
- A ranked remediation plan with cost against each item
- Cyber insurance questionnaires answerable with evidence
- Email that reaches the inbox and cannot be spoofed
Process
How the work runs
Plan and quote
Findings become a ranked plan with a price against each item. You approve before anything changes.
Deliver and maintain
Work runs in named windows with a rollback, documented as it goes.
Questions
Common questions
If yours is not here, ask it on a discovery call. There is no charge for the conversation.
Do you do penetration testing?
We scope and coordinate it with an independent testing firm, then own the remediation. Assessing and testing your own remediation in the same engagement is a conflict we avoid.
What baseline do you assess against?
For most Canadian small and mid sized businesses the Canadian Centre for Cyber Security baseline controls are the right starting point, with CIS Controls where a customer or insurer asks for them.