What a Cyber Risk Assessment Should Include
A scan is not an assessment. What a real cyber risk assessment covers for a small business, what you should get back, and the warning signs in a…
Read morePractical security for small businesses: the Microsoft 365 settings most often missed, and what to do in the first hour after an attack gets through.
A scan is not an assessment. What a real cyber risk assessment covers for a small business, what you should get back, and the warning signs in a…
Read moreCybersecurity companies sell very different things under the same words. How to work out which kind you need, who actually does the work, and six questions worth asking…
Read more
What to do in the first sixty minutes, in order, including the two calls people delay and the one instinct that destroys the evidence you will need.
Read more
Legacy authentication, quiet MFA exceptions, silent forwarding rules and open app consent. Eight configuration gaps we expect to find in a tenant nobody has reviewed since setup.
Read moreThe posts answer the general case. Tell us about yours and we will answer that one instead.