What we put in place
- Managed endpoint protection (EDR) using Bitdefender GravityZone on every workstation and server, with alerts monitored and acted on.
- Multi-factor authentication on Microsoft 365 and remote access, with conditional access where your licences allow it.
- Email security: SPF, DKIM and DMARC, plus filtering for phishing and malicious attachments.
- Patching of operating systems and third-party apps on a schedule, with exceptions tracked.
-
Firewall and network
A business firewall does far more than the router your ISP supplied. We use mainstream, non-proprietary hardware, and you get the admin login and the documentation. More on our networks and Wi-Fi work.
- Separate networks (VLANs) keep office machines, guest Wi-Fi, phones and printers, and smart devices apart.
- Secure remote access (VPN or ZTNA) instead of opening ports to the internet.
- Intrusion detection and prevention, blocking known-bad sites and, where it makes sense, whole countries.
- Content filtering by web category, set by policy.
- Internet failover: a second line (for example LTE or another fibre link) takes over automatically if the main one drops.
- Firmware kept up to date, configuration backed up and documented, alerts monitored.
- Backups that are tested, kept separate from the systems they protect (see backup and recovery).
POPIA
The Protection of Personal Information Act requires "appropriate, reasonable technical and organisational measures" to protect personal information. We can't make you POPIA-compliant on our own, since a lot of it is policy and process, but we can document the technical controls in place and close the gaps your information officer needs closed.
Security review
Not sure where you stand? We'll do a short review of your Microsoft 365 settings, endpoint coverage, backups and network, and give you a prioritised list. Fix it with us or with anyone else.
Common questions
Is antivirus enough for a small business?
Traditional antivirus catches known malware. Managed EDR also watches for suspicious behaviour, can isolate an infected machine, and someone is actually looking at the alerts. Combined with MFA and patching, it covers the most common ways small businesses get breached.
Do I need a business firewall if I have fibre?
Fibre is the connection, not the protection. A business firewall sits behind it. It keeps office machines, guest Wi-Fi and smart devices on separate networks, blocks known-bad sites, and gives staff secure remote access without opening ports to the internet. It can also switch to a second line, such as LTE, if the fibre drops.
What does POPIA require from my IT?
POPIA requires reasonable security measures for personal information: access control, protection against malware, backups, and a way to detect and respond to breaches. We help with the technical side and document it for your information officer.