Information security

Vulnerabilities are often caused by outdated software, incorrect settings, open services,
weak passwords or poorly protected systems. By regularly checking for vulnerabilities, a company can
identify weaknesses in time before they are exploited by attackers.

Vulnerability testing is carried out over both the internal and external environment. This means that we can check what
is exposed on the Internet, as well as what is vulnerable within the local network.

After the review, you will receive an easy-to-understand report where the findings are prioritised. For each
finding, we state why it poses a risk and what needs to be done about it.

Many companies do not know exactly which services are visible on the internet. These may be VPN portals, remote
access, web applications, mail servers, cameras, server services, test environments or legacy devices
that have remained publicly accessible.

We check your external exposure and help you reduce the attack surface. This means fewer
open routes into the company and fewer opportunities for abuse.
We can check:

– public IP addresses
– open ports and services
– remote access
– SSL certificates and basic web settings
– publicly accessible applications
– mis-exposed devices
– basic DNS and mail security settings

Traditional antivirus is no longer enough for modern threats. Attacks today often include phishing, misuse of
user accounts, scripts, macro documents, login data theft, ransomware and activities that
are not always recognised in time by basic protection.

We help you select, deploy and manage modern antivirus or endpoint protection. Solutions such as
Sophos Endpoint and Cisco Secure Endpoint provide advanced endpoint protection,
suspicious behaviour detection, EDR functionality, central management and faster response to security
events.

We can protect workstations, laptops, servers and users working in different locations.
We place special emphasis on central monitoring, correct policies, alerts and regular
review of detected events.

For more advanced security requirements, we deploy detection and response solutions on endpoint devices. EDR
helps to discover what happened on the device, how the threat started, where it has spread and what
actions need to be taken.

XDR goes one step further by integrating data from multiple sources, such as endpoint devices, network, email,
firewall and cloud services. This helps the business identify attacks faster, reduce the number of
unrelated alerts and get a better overview of its security posture.

Many companies do not have an internal team monitoring security events 24 hours a day. That’s why
makes sense as a link to the SOC, where events are collected, analysed and handled.

The SOC helps to detect suspicious activity, verify alerts, respond to incidents, analyse
events and make recommendations for improvement. This not only leaves the company with a large volume of alerts,
but also provides expert help in understanding what is really important and what requires action.

Connecting to the SOC makes particular sense for companies that want to improve their resilience, reduce response time
to incidents and meet higher security requirements.

When a security incident occurs, a quick and correct response is crucial. The wrong reaction can
cause more damage, loss of evidence or further spread of infection.

We help you analyse the incident, isolate affected systems, review logs, verify endpoint
devices, assess the extent of damage, remediate threats and make recommendations for further protection.

We can help with events such as:
– suspected infection of a computer or server
– ransomware attack
– suspected password theft
– unauthorised access
– unusual network performance
– suspected email abuse
– suspected compromise of a user account
– analysis of security alerts

Information and cyber security requirements are also becoming increasingly important from a regulatory
perspective. Obliged companies are required to regulate risk management, technical and
organisational measures, security policies, incident management, supply chain security,
business continuity and other key elements of information security.

We help companies prepare for NIS2 or ZInfV 1 in a practical way. First, we check
the current situation, then we prepare a list of missing measures and a proposal for improvements. We help with
technical measures, documentation, basic security organisation, security checks, system protection and
setting up controls.

Our aim is to give the company not just a generic document, but actionable steps that actually
connect to the existing IT environment.

We can help you:
– review the current situation
– assess the risks
– make recommendations for compliance
– arrange technical security measures
– protect endpoint devices
– arrange backups
– improve access control
– prepare for incident handling
– link to SOC controls
– document and prove the measures taken

Technology is important, but users are still one of the most common entry points for attacks.
Phishing messages, fake login pages, infected attachments, weak passwords and careless use of
remote access can quickly put an entire company at risk.

We provide practical training for our employees, presenting the most common
risks and the correct way to deal with them in a way that is easy to understand. We tailor the training to real-life examples from the business environment, so
it is also useful for non-technical users.