Services|08
Cybersecurity & Backups
The controls people will still have switched on next month, and a backup we have actually restored.
Security that staff bypass is not security. We roll multi-factor authentication out app by app, starting with email and remote access. People get a short walkthrough on a call, not a PDF. Exceptions are written down.
Beside that: endpoint protection, and off-site backups that have been opened. A locked mailbox does not help if the only copy of the accounts lived on a laptop that left in a bag. A scheduled backup that has never been restored is a hope.
For a firm or a faculty, the real question is who can see what. We will say that plainly, review it, and write it down. An agent can watch for the strange login. It should not be the thing that locks someone out of their own mailbox on a Monday.
The baseline belongs on every support plan. Audits, staff sessions and incident planning are scoped on top, so you are not paying for a workshop inside a bundle you did not ask for.
What that includes
- MFA on email and remote access, with a walkthrough people will sit through
- Endpoint protection on the machines that hold the work
- Off-site backup, plus a restore test so we know it opens
- A written view of who can see what
- Audits and incident planning when you want them, quoted separately