FR — EN Get in touch
The services — in the order you take them

Five services. A written scope, a deliverable, a timeline.

Three services form the core of the approach — audit, harden, document — and two complementary ones cover what an audit alone can't fix: the human reflex, and the ability to come back after an incident. Every engagement starts with a free call and a written scope. What's not included is said before we start — that, too, is a clean deliverable.

01 AUDITED

Access & Identity Review

You don't know who can access what, which accounts are lingering, or what a former employee can still see. This review answers — with proof.

Scope
  • 15 scored checks — MFA, privileges, dormant accounts, sharing, audit logs, offboarding
  • Prioritized action plan, in plain language
  • 45-minute debrief, recordable
Not included — on purpose
  • No penetration testing, no changes made
  • No hardware or license sales
DELIVERABLE — SCORED 15-POINT REPORTTIMELINE — 7 BUSINESS DAYS
Get in touch
02 HARDENED

Express Hardening

The findings are in — yours or someone else's — and the fixes are waiting. This engagement implements them without disrupting your team.

Scope
  • MFA everywhere, conditional access
  • Separate admin accounts
  • Offboarding procedure, written and tested
Not included — on purpose
  • No managed services, no on-call
  • No migration or tenant rebuild
DELIVERABLE — BEFORE / AFTER REPORTTIMELINE — 2 TO 3 WEEKS
Get in touch
03 DOCUMENTED

Security Trust Pack

A large client, a cyber insurer or a prime contractor asks for written proof. This pack answers in their language, without eating your days.

Scope
  • Vendor security questionnaire, completed
  • Policy pack sized to your team
  • NIS2 readiness file
Not included — on purpose
  • No certification, no label
  • No legal advice
DELIVERABLE — A FILE READY TO SENDTIMELINE — 1 TO 2 WEEKS
Get in touch
The complementary services

What an audit alone can't fix.

A flawless configuration won't stop an employee handing over their password, nor ransomware encrypting synced files. These two services work over time: the human reflex on one side, the ability to come back on the other. They follow a first review — never replace it.

04 TRAINED

Awareness & simulated phishing

Phishing remains the first way in, because it doesn't attack the machine — it attacks the person. The reflex to pause, verify and report can't be bought as a licence: it has to be maintained.

Scope
  • Ethical simulated phishing campaigns, scenarios matched to your sector
  • Two-to-three-minute micro-trainings triggered for those who click
  • Quarterly report a non-technical leader can read, plus a 12-month click-rate curve
Not included — on purpose
  • No campaign without written authorisation and prior staff information
  • No individual trap, no sanction: we measure the group
DELIVERABLE — MANAGED CAMPAIGNS + QUARTERLY REPORTTIMELINE — ANNUAL PROGRAMME, 100 % ASYNC
Get in touch
05 BACKED UP

Microsoft 365 backup & resilience

"Microsoft backs up my data" is the costliest misunderstanding in the cloud. Microsoft guarantees its platform's availability, not the recovery of your content — and ransomware encrypts precisely what is synced.

Scope
  • Third-party backup deployed across mail, OneDrive, SharePoint and Teams
  • Real restore test — a backup never tested is not a backup
  • Documented lightweight recovery plan, then supervision by report
Not included — on purpose
  • No 24/7 disaster recovery: work happens in business hours
  • No day-to-day managed services
DELIVERABLE — TESTED BACKUP + RECOVERY PLANTIMELINE — 1 TO 2 WEEKS SETUP, THEN ONGOING
Get in touch

Every engagement starts with a free thirty-minute call. We check the fit together — and if it isn't there, I'll say so.

Get in touch