Cyber Security

A structured four-stage assessment that turns an unclear risk position into a costed action plan.

• Identify: asset, data and third-party exposure mapping
• Detect: gap analysis against current tooling and logging coverage
• Protect: prioritised remediation plan with effort and cost attached
• Manage: ongoing governance, reporting and reassessment cadence

 Turn a compliance obligation into a defensible programme.

• POPIA readiness, data mapping and breach response planning
• Joint Standard 2 of 2024 alignment for financial services
• ISO 27001 and PCI gap assessment and remediation roadmapping
• Board-ready reporting pack so leadership can evidence oversight

Modern endpoint defence with detection and response behind it.

• Next-generation antivirus with behavioural detection
• Extended detection and response across endpoint, email and identity
• Managed threat hunting and 24 hour alert triage
• Automated isolation of compromised devices

 Stop trusting the network perimeter and start verifying every session.

• Zero trust network access replacing legacy remote access
• Cloud secure web gateway with content and category filtering
• Data loss prevention across web and cloud application traffic
• Consistent policy whether the user is in office, at home or on site

The channel where most incidents still begin.

• Advanced phishing, impersonation and payload defence
• Attachment sandboxing and link rewriting
• Protection extended across collaboration and file sharing platforms
• Domain authentication with SPF, DKIM and DMARC enforcement

High-performance filtering with centralised management across every site.

• Next-generation firewall deployment and lifecycle management
• Intrusion prevention, application control and web filtering
• Centralised policy administration across the full estate
• Consolidated logging with retention that meets audit requirements

 Most breaches are a credential problem before they are a technology problem.

• Single sign-on and multi-factor authentication rollout
• Privileged access management and just-in-time elevation
• Joiner, mover and leaver automation
• Access recertification campaigns with audit evidence

Train the layer that the attacker is actually targeting.

• Continuous micro-training rather than an annual slide deck
• Simulated phishing campaigns with per-department scoring
• Reporting that shows risk reduction over time
• Role-specific content for finance and executive teams