S—05
Security Build-out
For teams without a security function, the most valuable work is often the basics, done properly. We set up the controls that stop most real attacks, and leave you with documentation your team can maintain.
01Scope
What we test.
- 01Multi-factor authentication across key systems
- 02Backups that are tested and can be restored
- 03Logging and basic alerting
- 04Server and workstation hardening
- 05Access policy: who can reach what, and why
- 06Incident response basics: who does what on a bad day
02Process
How an engagement runs.
- 01
Assessment
A short review of what you have today and where the biggest risks are.
- 02
Plan
A prioritised plan you agree to, sized to your team and budget.
- 03
Implementation
We set up the controls with your team, not around it.
- 04
Hand-over
Documentation and a walkthrough, so the controls keep working after we leave.
03Deliverables
What you receive.
- 01Current-state assessment and prioritised plan
- 02Implemented controls, configured with your team
- 03Written documentation and runbooks
- 04Hand-over session