Our security journey

Three steps to a secure IT environment

Viruses, phishing emails, ransomware... you don't want that. Your company's IT environment needs to be secure. But is it? And if not, what should you do? Where do you start?

Call me for an appointment
Our security journey

Our security journey will help you. We will provide basic security for your company's IT environment in three steps:

1. Check: how secure is your IT environment?
2. Improve: adapting your IT environment
3. Monitoring and behaviour: staying safe

Check: how secure is your IT environment?

First, we will take a thorough inventory of your IT environment and look at how secure your business currently is. We do this using our Cyber Security Assessment Tool (CSAT).

The Cyber Security Assessment Tool

Using our Cyber Security Assessment Tool (CSAT), we will take a look at the security status of your company's IT environment. The CSAT is based on the CIS 18 framework, an internationally accepted framework of 18 security controls and measures. The tool also analyses from the principles of NIS2, the European cybersecurity directive. As a result, you will have a good basis for your company to become NIS2-proof.

The CSAT consists of a comprehensive technical analysis and a questionnaire. The automated scan quickly and effectively checks your corporate network, endpoints and your Microsoft 365 and Azure environment. All possible vulnerabilities come to light. Additionally, our security specialist runs through the questionnaire together with you or a colleague. This also creates a clear picture of your organisation's security processes and procedures.

Cyber security assessment tool

Advisory report

The CSAT results in a management summary and a very comprehensive and clear advisory report, including action points for your company. We will discuss this report with you. It will indicate what your company is doing well, but also where there are risks, how big these risks are, and how we can minimise them.

If that's what you want, then we'll be happy to take you to the next step in which we will concretely improve security for your business.

Our security journey

Improve your IT environment

Based on the recommendations from the CSAT report, we would be happy to get to work improving your IT environment. First, the desired security level for your organisation will be determined together. Then we will set up security accordingly. We take technical measures to protect the identity of the IT users, the hardware you use and the data your organisation has. Think about setting up multifactor authentication, making backups and installing updates, antivirus software and a firewall. What we do for you exactly depends on your choice of security level.
Which security level suits your organisation?
Image

Staying safe through monitoring and behaviour

Once everything has been set up for you, we will make sure that your security remains at the set level. We do this by constantly monitoring your IT environment and intervening where necessary. Staying secure also means training your employees, because they play a crucial role in information security. Sharing sensitive information, clicking on a dubious e-mail, logging on to insecure networks... careless action by your employees is a daily risk. What we also recommend is to have us perform the CSAT scan (see phase 1) on a regular basis, so that you constantly know where you stand and what you may need to improve further.

We will support you in this phase with professional IT management, setting up security policies, awareness training for your employees and a periodic CSAT scan:

Professional IT management
With our IT management, you can be assured of a good night's sleep without being kept awake by IT issues. Because we relieve you of all your worries. We monitor your IT environment and provide technical and functional management. 24 hours a day, 7 days a week; remotely and on-site. Our management department monitors daily for deviations from the set security level and corrects deviations if necessary. Management also takes care of installing the latest updates and patches, makes backups and cleans up, exactly according to the specifications of the security level.

We can also help you set up a clear security policy. That basis is necessary to train your staff. We take your employees through the principles of the policy and make sure they know the rules of the game. From this basis , we then train your staff's security awareness through our security awareness programme. So that, for example, they will recognise a phishing e-mail, know how to share a file securely and know how to log into a remote location without risk.

Our security awareness programme

Periodic CSAT scan
We like repeating the CSAT scan on a regular basis, preferably at least once a year, because your IT environment is always changing and new cyber threats are the order of the day.

In this phase, we like to take you through new and relevant developments in the security field based on an IT roadmap . So that your company always remains up-to-date and takes maximum advantage of technological opportunities. Together with you, we look at your security wishes and discuss concrete projects arising from them. In the IT roadmap, we record all projects and give an indication of the corresponding planning and investment.

To the highest level of security?

As an IT company, we provide good basic security and monitoring of your company's IT environment, but we are not a specialised cybersecurity company with a Security Operations Centre that tests an environment 24/7, sets up traps and watches for anomalous user behaviour. Do you want this highest level of security? Then we would be happy to help you with our eXtended Detection and Response service (XDR), which we provide in close cooperation with our security partner Masero.

Existing customer?

Are you a customer of ours? Then we have, in fact, already gone through the security journey with you and your basic security is either in good order or we are working on it together with you. Of course, in our regular (IT roadmap) discussions with you, we put security high on the agenda and look together at how we can further improve the IT environment. For instance, by means of such a periodic CSAT scan. If necessary, we can arrange an external audit for you to have your company's IT environment assessed by an independent party.

The 10 security pillars of IT Local

Your company's digital security is in good hands with us. Our 10 security pillars offer you the assurance of good basic security:

Improving the world starts with yourself..... Of course, IT Local also meet the highest security requirements. We have had this independently audited by Kiwa and with good results. IT Local is fully ISO 27001- and NEN 7510-certified.

We have long managed the IT environment of renowned organisations where security and handling confidential information are top priorities, such as organisations in the legal, accountancy, and childcare sectors.

24/7 monitoring and management of IT environments is done professionally by our experienced specialists from the Management Team.

For security issues, we employ dedicated staff. We also use external ethical hackers to identify weaknesses in systems and programmes.

Our self-developed workplace, the smart workplace, is a highly secure workplace. It offers your company a scalable layer that provides extra security. From the workplace, you can centrally manage applications and employee rights. With the compliancy dashboard, you easily map the risks of apps and data sources.

We always focus on standardisation of the IT environment, because fewer exceptions and exotic solutions mean more security.

We only work with products and services from reliable partners.

As a Microsoft Gold Partner, we have short lines of communication with Microsoft and access to their premier support. This allows us to offer you quick and good help with an urgent or complex security issue regarding Microsoft solutions.

Software, files and data outside the door? It is absolutely safe with us. Our shared platform recently passed a pen test with flying colours and our data centre is ISO-certified.

We hope never to have to call on it, but if something does go wrong, our cybersecurity insurance from market leader Chubb provides cover and support. In the event of an attack, a team of specialists will immediately go to work for you. To stop the attack, fix the disruption and restore services. You will be reimbursed for any damage caused to your business.

Image