Cybersecurity & Backup
Protect the business from the threats small companies actually face, and make sure you can get back to work when something goes wrong.
Cybersecurity
Layers, so one mistake is not a disaster
Most attacks on small businesses are not sophisticated. They are a stolen password, a convincing email, or a computer nobody updated. We put several layers in the way, so that when one fails, the next one holds.
-
Two-step sign-in MFA
A stolen password is not enough to get in. We turn on multi-factor authentication for email and the accounts that matter, including seasonal staff.
-
Protection on every computer EDR
Modern endpoint protection that watches for suspicious behaviour, not just known viruses, and is monitored by us instead of left to pop up warnings.
-
Email and phishing filtering
Fake invoices, spoofed vendors, and bad links are stopped before they reach an inbox, where most attacks begin.
-
Staff training
Short, practical training so your team can spot a scam before anyone clicks, and knows who to tell when something looks wrong.
-
Access reviews
We check who can reach what, and remove access that former employees, old vendors, and forgotten accounts still have.
-
Firewall and network security
Your network is separated so that guest WiFi, payment terminals, and business computers cannot reach each other.
Compliance
Controls you can actually show someone
Insurers, card processors, customers, and regulators increasingly ask what protections you have in place. We turn those requirements into real controls and document them, so you can answer with confidence.
-
PCI DSS
If you take card payments in a tasting room, restaurant, or shop, the card networks expect specific protections. We put them in place around your point of sale.
-
Cyber insurance
Renewal questionnaires now ask for controls by name. We implement them and help you answer accurately.
-
Cannabis licensing
California licensees depend on working video surveillance and track-and-trace (Metrc) access. We keep the network and storage behind them reliable.
The controls most questionnaires ask for
The same handful of protections come up again and again. We put them in place once, properly, and keep the evidence.
- MFA
- Endpoint protection
- Tested backups
- Access reviews
- Written down, not just switched on
- Ready for the next questionnaire
Backup & Disaster Recovery
A backup only counts if it restores
Hardware fails, files get deleted, and ransomware locks whole businesses out of their own data. We keep copies of what matters, test that they work, and have a plan for getting you running again.
Backups
Business data lives in more places than the server. We back up each of them, with copies kept where you need them.
What is backed up
- Servers
- Computers
- Microsoft 365
- Google Workspace
Where it is kept
- On-site
- Off-site
- Both
Disaster recovery
A written plan for the bad day: what gets restored first, how long it should take, and who does what.
- Plan
- Test
- Restore
- Restores are tested, not assumed
- Kept out of reach of ransomware
When something does go wrong
-
Contain it
We isolate what is affected so the problem stops spreading, whether it is failed hardware or an attack.
-
Restore from a clean copy
Files, mailboxes, or whole systems are brought back from the most recent backup we know is good.
-
Get people working
The priority is the systems that take payments and serve customers. Everything else follows in order.
-
Close the gap
We work out how it happened and fix the cause, so the same thing does not happen twice.
Find out where you are exposed
Tell us how your business runs today. We'll tell you plainly what is covered, what is not, and what we would fix first — no obligation.