IT security
Many attacks start with a stolen password or a fake sign-in page. We protect your accounts, devices, email and data step by step, train your team and prepare you for an incident, matched to your size and your budget.
Challenges
Typical situations from daily work and how we approach them.
How we solve it
We introduce sign-in with a second factor for everyone, by app or passkey, and block legacy methods that bypass it. The change is announced and supported.
More on this in our blogHow we solve it
Access rules check person, device and location at every sign-in: company data only on managed devices, for example, and stronger sign-in for administrators. New rules are tested before they take effect.
More on this in our blogHow we solve it
Modern protection software checks links and attachments and protects the devices. Add clear reporting routes for suspicious messages and short training for your team.
How we solve it
We set sharing rules, review existing permissions and label confidential documents so that protection and encryption travel with the document.
AI IN THIS SERVICE
Modern protection systems use AI to recognise suspicious behaviour. And where your team uses AI, clear rules and protected data make sure nothing confidential leaks out.
More on AI & automationOfferings
Each offering can be booked on its own or combined with others. We agree the exact scope together.
Strong sign-in for everyone and access rules that fit your devices and processes.
A user directory without legacy clutter, so your people have one account for everything and leavers lose access at once.
Few, separate administrator accounts with exactly the rights they need.
Protection against malware, phishing and dangerous attachments, with alerts that someone actually reads.
Nobody should be able to send email in your name, and your genuine email should arrive.
Short, practical training so your team recognises phishing and reacts the right way.
Identify, label and share confidential content in a controlled way.
The recycle bin and file versions are no backup. We back up email, files and team data separately and test the restore.
Email and documents are kept as long as your obligations require, and deleted afterwards.
The technical and organisational measures that data protection law requires, implemented and documented. The legal assessment stays with your adviser.
A plan that sets out who does what when an account is taken over or data is encrypted.
An example project
First we secure sign-in with a second factor and block legacy methods. Then only managed devices can reach client data. Finally, confidential documents are labelled and sharing with external people is governed.
Yes. Many attacks are automated and hit companies of every size, often through stolen passwords or phishing. A few measures already close the most common ways in.
Hardly, if it is set up well. On managed devices people are rarely asked again, and passkeys or face recognition are quicker than passwords. We announce changes and test them first.
The revised Federal Act on Data Protection requires appropriate data security through technical and organisational measures. Strong sign-in, protected devices and controlled sharing are part of that. It does not replace a legal assessment.
We clarify existing accounts and administrators, devices, external access and specific requirements, from clients or insurers for example. Round-the-clock monitoring is not part of this service; if you need it, we show suitable options.
Our approachFurther reading
How Windows Autopilot and Microsoft Intune set up new laptops automatically, what small businesses need, and how to plan the pilot, leavers and older devices.
Read moreWhy MFA alone does not fully protect Microsoft 365 accounts, and how small businesses build a solid baseline of access rules with Conditional Access.
Read moreBefore buying Copilot licences for everyone, sort out permissions, sharing links, sensitivity labels and a pilot group. A practical guide for Swiss SMEs.
Read more