DevonComputer

Services

Cyber security

Security work for a Devon organisation is mostly discipline. Who can sign in. What is patched. Whether the mail domain tells other mail systems the truth. Whether the backup can be opened with the same password as the inbox. We would rather do those things properly than present a dramatic review.

Controls that usually matter

  • A list of who holds administrator rights, and the removal of shared administrator logins.
  • Multi-factor authentication on mail and on remote access, with a recovery path for a locked-out director that does not involve a note on a monitor.
  • Patching, with a written expectation and a note of anything that cannot be patched yet.
  • SPF, DKIM and DMARC on the mail domain, explained in plain language and set to a policy you accept. We do not jump to a reject policy on the first day if that would bounce legitimate mail.
  • Endpoint protection chosen for the machines you have, and recorded by name in your papers. “Something is installed” is not a record.
  • A backup that is not controlled by the everyday login.
  • A short note for staff: what to do with a suspicious message, and who to tell. Not a campaign.

If something seems wrong

  1. Stop using the account or the device you think is affected.
  2. Do not delete mail or wipe a machine in the hope of tidying the scene.
  3. Call the enquiry line for your area and say the matter is urgent and confidential.
  4. We agree who else needs to know. The default is a short list, not an announcement to everyone.
  5. We agree what to preserve, so that a later review is not guessing.

If you need a forensic investigator, a solicitor, or your insurer, we will say so rather than improvise that role. We do not claim to be those things.

What we do not claim

We do not claim a certification on this site. If you need a scheme such as Cyber Essentials, we can discuss the work involved. Holding a badge is a separate fact, and it is not stated here.

We also do not guarantee that an office will not be breached. Anyone who offers that guarantee is overselling. We can put sensible controls in place and respond carefully.

Related

Questions

Do you insist on a particular security product?

No. Controls are chosen for the environment and recorded. A product name is not a substitute for knowing who has administrator rights.

What should we do first if we think something is wrong?

Pause. Do not announce it widely, and do not start deleting things. Call the enquiry line, say it is urgent and confidential, and we will agree the next step. Usually that is to contain the affected account or device and to preserve what a later review would need.

Can you guarantee we will not be breached?

No. We can put sensible controls in place and respond carefully. A guarantee that an office cannot be breached is not a serious offer.