Protection
Layers that start on day one.
Endpoint, cloud, identity, email, web, backup, and people controls run together in the managed plan. They are not optional add-ons or a later phase.
Back to FAQs
How do you approach security and compliance?
Protect continuously. Prove it on a schedule.
We assess risk by business impact, not scanner noise; implement the controls, collect evidence, and re-assess. Compliance becomes a state you maintain, not a project you repeat.
Governance
Evidence that keeps controls honest.
We inspect software, cloud, and hardware in detail, prioritize findings by business impact, then review controls with named owners and scheduled evidence.
Two lenses
Keep threats out. Limit damage inside.
Most breaches use one direction to arrive and the other to move. Both need their own controls.
North–South · the perimeter
Each hop has a gate.
Traffic moving across your boundary must pass a control before it reaches data.
Hop 01
Internet
DNS + web filtering
Hop 02
Edge
MFA + current firmware
Hop 03
Gateway + DMARC
Hop 04
Device
AV + EDR isolation
Hop 05
Cloud
CDR + conditional access
Hop 06
Data
Backup + least privilege
East–West · containment
Inside is not one open room.
Segmentation and identity controls limit how far a compromised device can travel.
Zone · Staff
WorkstationsWi-FiPrinters
Zone · Servers
File serverDomain controller
Zone · Recovery
Backup appliance
Named crossing pointsAdmin tieringEDR / MDR / CDR alertsTested recovery
Security bundle
Every client gets every layer.
The layers work as a bundle. A control you decline is a path an attacker keeps open.
AV
Antivirus on every managed endpoint.
Stops: Known ransomware.
EDR
Behaviour detection, quarantine, and isolation.
Stops: Novel malware.
MDR
24×7 human triage for security alerts.
Stops: Abused tools overnight.
CDR
Detection for Microsoft 365 and cloud activity.
Stops: Suspicious sign-ins and sharing.
Dark web
Monitoring for exposed staff credentials.
Stops: Credential stuffing.
Awareness
Phishing simulation and micro-training.
Stops: Human-delivered attacks.
Patch managementEmail security gatewayDNS and web filteringMFA enforcementMicrosoft 365 backupPassword manager
Granular assessments
Inspect separately. Report together.
Findings are written specifically enough to act on this week, with a fix and owner attached.
01
Software
Patching, hardening, admin access, endpoint health, and configuration drift.
A prioritized fix and owner for each device.
02
Cloud
Microsoft 365 and Entra access, sharing, mail rules, roles, and sessions.
The exact exposure and change needed.
03
Hardware
Edge, wireless, server firmware, backup immutability, and operational devices.
Lifecycle position and replacement horizon.
Assessment rhythm
Continuous telemetry. Scheduled decisions.
Continuous
EDR, MDR, CDR, dark-web monitoring, and awareness telemetry.
Alerts with triage notes + monthly posture roll-up.
Quarterly
Configuration, phishing, patch posture, roles, and access re-review.
Posture report + prioritized fix list.
Annual or material change
Attack-surface review, vulnerability scan, and framework assessment.
Assessment report + updated risk register.
Governance loop
A control is only real when it is reviewed.
The loop converts a requirement into a configured control, evidence, a decision, and then a new review.
- 01
Govern
Set scope, ownership, and risk appetite.
- 02
Implement
Configure and document the control.
- 03
Evidence
Collect proof as the environment runs.
- 04
Test
Prove the control works and is acted on.
- 05
Report
Put the state in front of accountable people.
- 06
Improve
Close gaps, re-test, and begin again.
What you receive
Reporting is part of the deliverable.
Every artefact has an audience and cadence, so there is a clear record of what happened and what needs a decision.
| Artefact | Cadence | Audience |
|---|---|---|
| Executive risk score | Monthly | Leadership |
| Prioritized fix list | On issue / quarterly | Work owners |
| Security posture summary | Monthly | IT contact |
| Phishing results | Monthly | People managers |
| Compliance evidence pack | Quarterly / on request | Auditor or regulator |
| Incident summary | Per incident + monthly | Leadership |
One ranking philosophy: business impact over scanner noise. We prioritize what is exposed, what it could cost, and how likely it is.
Let’s talk
Need a clearer view of your risk?
We can start with your environment, the controls that matter most, and the evidence you need to maintain.