Home / Different approaches to your IT infrastructure / Security and Audit
If someone broke in, how long until we noticed?
Security and Audit
Who connected to which system, when, how, and what data did they touch? We set up monitoring that makes these questions easy to answer, close the gaps in order of priority and prepare you for mandatory audits.
What we ask first
- Are your logs collected in one place, and who looks at them?
- When were your firewall rules last reviewed?
- When someone leaves, how quickly is their access removed?
- Is there a standard or audit you must comply with (KVKK, GDPR, ISO 27001, etc.)?
What we do
- Security assessment and a prioritised findings report
- Setting up monitoring and log collection
- Reviewing and simplifying firewall rules
- Checking user permissions and roles, password policies
- Finding outdated or unused software
- Pre-audit compliance report, roadmap and support through the audit
Suspicious login at midnight
- Failed logins✕ repeated attempts
- Alert✓ immediately
- Account✓ locked
First step: A security assessment: logs, firewall, permissions.
Log monitoring: what you learn in the first 30 days →Other questions
- IT Infrastructure ConsultingIf a server fails, how long does our business stop?
- API SecurityWho calls our APIs, and how often?
- Performance and MonitoringWhy are our systems so slow?
- AutomationWe do the same tasks by hand every day.
- Software DevelopmentWe can't find the software we need.
- AIHow can we use AI in our business?