Security that survives your audit
MFA, endpoint detection, email security and awareness training. Set up to NIS2 expectations, with documentation you can hand to an auditor or insurer.
Who it is for
- Companies covered by NIS2 or supplying to companies that are
- Organisations that have already faced phishing or a hacked mailbox
- Management teams that want to know how secure they really are
The baseline
Identity & MFA
Strong authentication, conditional access and privilege management.
Endpoint detection
EDR on every device, followed up by our service desk.
Email security
SPF, DKIM, DMARC enforcement and phishing filtering.
Awareness
Phishing simulations and short quarterly trainings.
What's included
- Multi-factor authentication (MFA) on every account
- Endpoint detection on every laptop and server
- Email security: SPF, DKIM and DMARC set up correctly
- Backups following the 3-2-1 rule, with restore tests
- Phishing simulation and short awareness training
- Overview of who has access to what
- Incident plan: who does what when things go wrong
- Documentation for NIS2 and your insurer
What you notice
Lower chance of a breach
Most attacks stop at MFA and proper email security.
Faster recovery
Tested backups mean hours instead of days.
A file that holds up
Ready for audits, customers and your cyber insurance.
From baseline to provable
Baseline scan
Technical scan plus interviews; risks prioritised by impact.
Quick wins
Implemented within 30 days.
Provable
Policy, logging and documentation toward NIS2.
Practise
Annual restore test and incident exercise.
Frequently asked
Are we in scope for NIS2?
Often indirectly, through clients in your chain. The baseline scan clarifies it.
Do you do incident response?
Yes, with fixed escalation paths and an external forensic partner where needed.
Next step
A 30-minute call: we look at what is already there and what you really need.