Security Survey

Workplaces should be secured with a firewall. The firewall built into a modem/ router supplied by your Internet Service Provider (ISP) has very basic functionality and provides minimal protection.

Workplaces should be secured with a firewall. The firewall built into a modem/ router supplied by your Internet Service Provider (ISP) has very basic functionality and provides minimal protection.

Workplaces should be secured with a firewall. The firewall built into a modem/ router supplied by your Internet Service Provider (ISP) has very basic functionality and provides minimal protection.

A modern firewall will have security software built in that is updated by the manufacturer daily if the device has an active subscription. This software is often responsible for the real “secret sauce” of threat detection.

A modern firewall will have security software built in that is updated by the manufacturer daily if the device has an active subscription. This software is often responsible for the real “secret sauce” of threat detection.

A modern firewall will have security software built in that is updated by the manufacturer daily if the device has an active subscription. This software is often responsible for the real “secret sauce” of threat detection.

Firmware is a type of software that tells a piece of hardware how to work! Firmware is regularly updated by manufacturers to improve performance and sometimes fix critical security flaws.

Firmware is a type of software that tells a piece of hardware how to work! Firmware is regularly updated by manufacturers to improve performance and sometimes fix critical security flaws.

Firmware is a type of software that tells a piece of hardware how to work! Firmware is regularly updated by manufacturers to improve performance and sometimes fix critical security flaws.

Good quality anti-malware software is an essential part of a multi-layered IT security defence setup. “Free” software is almost always not licensed for business use, it will have reduced functionality and little or no support.

Good quality anti-malware software is an essential part of a multi-layered IT security defence setup. “Free” software is almost always not licensed for business use, it will have reduced functionality and little or no support.

Good quality anti-malware software is an essential part of a multi-layered IT security defence setup. “Free” software is almost always not licensed for business use, it will have reduced functionality and little or no support.

Often overlooked, mobile devices can provide a “back door” into your business IT if not secured in the same way as other business machines.

Often overlooked, mobile devices can provide a “back door” into your business IT if not secured in the same way as other business machines.

Often overlooked, mobile devices can provide a “back door” into your business IT if not secured in the same way as other business machines.

Although most cloud services (e.g. Microsoft 365) are incredibly robust, they usually make it clear that it is your responsibility to ensure your data is safe.

Although most cloud services (e.g. Microsoft 365) are incredibly robust, they usually make it clear that it is your responsibility to ensure your data is safe.

Although most cloud services (e.g. Microsoft 365) are incredibly robust, they usually make it clear that it is your responsibility to ensure your data is safe.

If an online service is only secured with a username and password it can be very easy to access by a malicious actor. Multi factor authentication is easy to implement on all reputable cloud services and should be considered mandatory.

If an online service is only secured with a username and password it can be very easy to access by a malicious actor. Multi factor authentication is easy to implement on all reputable cloud services and should be considered mandatory.

If an online service is only secured with a username and password it can be very easy to access by a malicious actor. Multi factor authentication is easy to implement on all reputable cloud services and should be considered mandatory.

Vulnerabilities in software are a very common route for cyber attacks. Software developers are good at releasing updates to correct these vulnerabilities but they are not always applied automatically?

Vulnerabilities in software are a very common route for cyber attacks. Software developers are good at releasing updates to correct these vulnerabilities but they are not always applied automatically?

Vulnerabilities in software are a very common route for cyber attacks. Software developers are good at releasing updates to correct these vulnerabilities but they are not always applied automatically?

There comes a point where manufacturers and developers stop updating and patching their products and you must ensure that you are not using such products.

There comes a point where manufacturers and developers stop updating and patching their products and you must ensure that you are not using such products.

There comes a point where manufacturers and developers stop updating and patching their products and you must ensure that you are not using such products.

If a computer is stolen, data on unencrypted drives can be very easily accessed. Consider the risk to your organisation if this data included personal, financial or commercially sensitive data.

If a computer is stolen, data on unencrypted drives can be very easily accessed. Consider the risk to your organisation if this data included personal, financial or commercially sensitive data.

If a computer is stolen, data on unencrypted drives can be very easily accessed. Consider the risk to your organisation if this data included personal, financial or commercially sensitive data.

An additional measure, or an alternative for devices that do not support drive encryption (for example, mobile phones and tablets), which will enable you to remotely wipe a lost or stolen device of sensitive data.

An additional measure, or an alternative for devices that do not support drive encryption (for example, mobile phones and tablets), which will enable you to remotely wipe a lost or stolen device of sensitive data.

An additional measure, or an alternative for devices that do not support drive encryption (for example, mobile phones and tablets), which will enable you to remotely wipe a lost or stolen device of sensitive data.

Certain types of web site are known to be more likely to host dangerous files and it is sensible to pro-actively block them from employee devices.

Certain types of web site are known to be more likely to host dangerous files and it is sensible to pro-actively block them from employee devices.

Certain types of web site are known to be more likely to host dangerous files and it is sensible to pro-actively block them from employee devices.

Remote workers have significantly less protection when working outside of the office. You should implement tools such as software-based DNS security which help block employees from accessing malicious websites wherever they work.

Remote workers have significantly less protection when working outside of the office. You should implement tools such as software-based DNS security which help block employees from accessing malicious websites wherever they work.

Remote workers have significantly less protection when working outside of the office. You should implement tools such as software-based DNS security which help block employees from accessing malicious websites wherever they work.

Email is one of the most common methods used to carry out cyber-attacks. You must invest in an email security solution which protects against phishing, malware, spam, and malicious links.

Email is one of the most common methods used to carry out cyber-attacks. You must invest in an email security solution which protects against phishing, malware, spam, and malicious links.

Email is one of the most common methods used to carry out cyber-attacks. You must invest in an email security solution which protects against phishing, malware, spam, and malicious links.

It is important to have an experienced cyber security professional assess your organisation at least once per year to identify risks and recommend solutions to mitigate them. Risks should be reviewed at board level.

It is important to have an experienced cyber security professional assess your organisation at least once per year to identify risks and recommend solutions to mitigate them. Risks should be reviewed at board level.

It is important to have an experienced cyber security professional assess your organisation at least once per year to identify risks and recommend solutions to mitigate them. Risks should be reviewed at board level.

Human error is the single biggest cyber security risk in your organisation. It is fundamental that your staff know how to safely use IT systems both inside and outside of the office. A policy alone is not sufficient.

Human error is the single biggest cyber security risk in your organisation. It is fundamental that your staff know how to safely use IT systems both inside and outside of the office. A policy alone is not sufficient.

Human error is the single biggest cyber security risk in your organisation. It is fundamental that your staff know how to safely use IT systems both inside and outside of the office. A policy alone is not sufficient.

Vulnerability scanners help identify weaknesses in your IT systems which could be exploited by a cyber criminal to attack your systems and steal your data.

Vulnerability scanners help identify weaknesses in your IT systems which could be exploited by a cyber criminal to attack your systems and steal your data.

Vulnerability scanners help identify weaknesses in your IT systems which could be exploited by a cyber criminal to attack your systems and steal your data.

Systems like Microsoft Endpoint Manager and Azure Active Directory are low cost, cloud based, serverless solutions which allow you to centrally control configuration and security settings for users and devices and help keep them secure.

Systems like Microsoft Endpoint Manager and Azure Active Directory are low cost, cloud based, serverless solutions which allow you to centrally control configuration and security settings for users and devices and help keep them secure.

Systems like Microsoft Endpoint Manager and Azure Active Directory are low cost, cloud based, serverless solutions which allow you to centrally control configuration and security settings for users and devices and help keep them secure.

It is important that you have clearly defined processes detailing how different types of access request should be raised, managed, and approved. For example, you could maintain checklists for processing starters and leavers.

It is important that you have clearly defined processes detailing how different types of access request should be raised, managed, and approved. For example, you could maintain checklists for processing starters and leavers.

It is important that you have clearly defined processes detailing how different types of access request should be raised, managed, and approved. For example, you could maintain checklists for processing starters and leavers.

Employees should only have the minimum required level of access to your systems to do their job. You can typically use security groups and RBAC (role-based access control) to help manage this.

Employees should only have the minimum required level of access to your systems to do their job. You can typically use security groups and RBAC (role-based access control) to help manage this.

Employees should only have the minimum required level of access to your systems to do their job. You can typically use security groups and RBAC (role-based access control) to help manage this.