Cyber security
Locked where it matters
Most of what gets called cyber security is a product with a dashboard. The useful part is smaller. Who can sign in. What happens to a laptop that leaves. Whether yesterday’s files can be got back. We put those controls in place and we keep them there.
- M365 Live tenant, mail, teams
- Voice Quiet phones on the data network
- Fibre Live full fibre to the premises
- Network Live routers, switches, wi-fi
- Cyber Quiet sign-in, devices, backup
- Software Quiet tools built to fit the estate
What we take on
- Multi-factor authentication on the tenancy, and on anything else that holds the company’s mail or money
- The laptops: a password, encryption, and a way to remove the company data if a machine goes missing
- A backup that sits apart from the thing it protects, and a restore we have tried
- Mail settings that make it harder for someone else to send as your domain
- The firewall on the office network, so the controls are not only in the cloud
- The path toward Cyber Essentials, including the questionnaire, when you want the certificate
What we will not pretend
- We will not sell a security product and call that a policy
- We will not promise that nothing will ever get in
- We will not print a Cyber Essentials badge unless the certificate is actually held
- We will not claim round-the-clock monitoring we do not run
In practice
A password on its own is not enough for the tenancy. Multi-factor authentication means a second check. It should be on for mail, and for the other places the company keeps money.
The laptop is part of the same problem. If it leaves the building, the disk should be encrypted, and there should be a way to cut off the company data. That is ordinary care, not a project.
Microsoft keeps your mail for its own operations. That is not a promise you can get last Tuesday’s folder back. Backup is a separate copy, and it only counts once we have restored something from it.
SPF, DKIM and DMARC are the mail settings that tell the world which servers may send as your domain. They stop some spoofing. They do not stop a person clicking a convincing message. We turn them on, and we say what they do not do.
Cyber Essentials is a UK government-backed check of basic controls: firewalls, secure configuration, access, malware protection, and updates. We can put those controls in place and help with the questionnaire. Holding the certificate is a separate step.
A lot of this is the tenancy. The page for that work is Microsoft 365. This page is the controls across the estate, including the network in the building.