Cybersecurity
Security assessments, identity and endpoint protection, network security, backup and recovery, and staff awareness.
The problem
Most businesses know security matters but can’t say where they stand. So money goes on tools while the simple gaps stay open: weak sign-ins, untested backups and old accounts.
Signs you need this
- Clients send security questions you can’t answer with confidence
- Nobody has tested restoring a backup
- Staff sign in with a password alone
- You’re not sure who has admin access
What changes
A clear view of your risks, and the gaps closed in the right order.
- A written view of your risks, in priority order
- Stronger sign-ins across the business
- Backups you have seen restored
- Admin access reviewed and recorded
Layers, not a single wall
Security works in layers. Each one has a chance to stop an attack or limit the damage; none of them is enough alone. Choose a layer, or follow an illustrative phishing email through them.
Identity
Multi-factor sign-in on every account, and a few separate, protected admin accounts.
- Connects to
- Every sign-in to email, files and systems.
- Why it matters
- A stolen password alone isn’t enough, and an attacker can’t get far without admin rights.
What’s included
- Security assessment with prioritised risks
- Multi-factor sign-in and identity protection
- Endpoint protection on laptops and servers
- Firewall and network security configuration
- Backup and recovery, with restore tests
- Staff awareness guidance
Specific tasks
Every service, task by taskWhat you receive
Written records you keep, whoever looks after your IT in future.
- Written assessment with prioritised risks
- Remediation record
- Backup restore test report
- Access review
Security baseline report
Access review
Specimen
Finance shared drive
- Account
- Finance team
- Access
- Edit
- Still needed
- Yes
- Action
- None
Finance shared drive
- Account
- Former contractor
- Access
- Edit
- Still needed
- No
- Action
- Removed
Firewall
- Account
- Shared admin login
- Access
- Full
- Still needed
- No
- Action
- Replaced with named accounts
Security baseline
Example engagement: shows a typical project, not a specific client.
The situation
A client asks how the business protects their data, and there is no clear answer.
What exQ does
Security assessment, multi-factor sign-in, endpoint protection, access review and a backup restore test.
What you receive
Written risk report, remediation record and a tested backup.
How we deliver
Assess
We review your setup, accounts, devices and backups.
Prioritise
We write up the risks in priority order and agree what to fix first.
Fix
We close the highest risks first and record every change.
Keep checking
We test backups and review access on a regular schedule.
Explore it yourself: the cybersecurity decision lab
Respond to five fictional security situations, one decision at a time. How containment, investigation and recovery fit together, and which controls reduce each risk.
About 3 minutes a scenario. Fictional data, in your browser, with nothing to sign up for.
Do we need expensive security tools?
Not always. Advice comes before spend: often the right first step is to configure what you already own.
Can you help us answer a client’s security questions?
Yes. The written assessment and remediation record give you a clear, factual basis for your answers.
Do you help staff with security?
Yes. Staff awareness guidance is part of the service, in plain language.
Not sure where your security stands? Start there.
Tell us where your technology stands and where you want it to go. We reply to every enquiry within one business day.