The access of people who left
People who left months ago and can still get in: access nobody revoked when they left.
Cybersecurity for businesses where security is nobody’s job
We audit what is there, train the people who use it and step in when something is already happening. The report is yours.
What you get, by name
Documents you can open and take with you.
- The audit report with every finding, its priority and its fix.
- The list of who has access to what.
- The results of the phishing simulation: how many people clicked.
- Training for your staff, built on cases from their own work.
- The report stays with you, whether you carry on with us or not.
What turns up when somebody looks
None of this is unusual: nobody was asked to look.
Unpatched systems, permissions left over
Servers left unpatched, insecure configurations left that way to get something working, and rights granted for one particular day.
The way in is somebody in a hurry
An email that imitates a supplier’s, a link at exactly the wrong moment. One person is enough, and that person has, almost always, had no training.
None of the three turns up alone; they are found by reviewing.
How security work runs here
Four steps, and the fourth is looking again later.
Audit
We review machines, servers, access, permissions, updates and whether the backups restore, with attack simulation where needed.
Report with priorities
Every finding with its priority level and recommended fix. It is yours and you keep it.
Fix and train
We fix what is urgent and train the staff, with phishing simulations built on Gophish.
Measure again
The same audit repeated later, to see whether what was fixed is still fixed. It is contracted separately.
Who this is for, and who it is not for
A good fit
- Small businesses with nobody dedicated to security.
- Anyone who has had a scare: an odd email, an access that did not add up.
- Anyone who has had staff changes and does not know which access was left open.
Not a fit
- Anyone after permanent watch. We step in when an alert fires or a problem appears.
- Anyone who wants to audit without training anybody, which is how almost everything gets in.
Frequently asked questions
What if the attack is already under way?
We handle it. The order is always the same: an initial look at what is happening, containment, recovery of the affected systems, and measures so that it does not happen again.
What does “detection and response” mean?
We step in on the alerts when you have detection in place and act when a problem is identified. Nobody watches your systems permanently.
Does the audit break anything?
No. We test what does not disturb the working day, and the simulations are aimed at people, not systems. If a test could get in the way, we tell you and decide beforehand.
Is this a project or something ongoing?
It can be either: the audit and the training have a beginning and an end, and if you then want follow-up, it becomes a monthly arrangement.
Tell us about your situation
Tell us what has happened or what worries you. The first call costs nothing.
Tell us what’s broken+34 600 237 257info@isitechconsulting.com