Service · Cyber security

Security hardening

This service is for businesses without a regulator breathing down their neck that would still very much rather not spend a week offline because of ransomware. We start with a review and fix whatever gives the most protection for the least money. That is nearly always configuration, not new purchases.

Send an enquiry See the scope

1 week

for the review

Configuration

solves most findings

Plan

in priority order

Verification

by rescanning

What the service covers

We do not measure against paperwork but against whether the environment would survive a typical attack. As reference points we use the CIS Benchmarks and Microsoft Secure Score.

Talk it through with us

External edge

What is visible from the internet, which ports are open and which access routes have been forgotten.

Accounts and rights

Shared passwords, active accounts belonging to leavers, too many administrators and weak password rules.

Default settings

Old protocols such as SMBv1 and NTLMv1, legacy authentication in Microsoft 365, macros and unneeded services are switched off.

Patching

How far behind the systems are and whether any patching process exists at all.

Backup

Does it exist, where is it kept, is it protected against encryption, and has a restore ever been tested?

Plan

A list with priorities, effort and cost estimates.

How we deliver it

The review takes a week, and closing the most urgent items typically another two to three.

Collection

We examine the environment from outside and inside over remote access and talk to your IT lead.

Report

Findings with a clear explanation of the consequences, not a list of technical jargon.

Quick fixes

First we close what configuration can solve: passwords, permissions, ports and backup protection.

The rest

Work that needs a budget goes into a separate document with estimates and a business case for management.

An untested backup is only a hope. We regularly discover jobs that silently broke a quarter ago, archives missing the folders that matter, or restores that would keep a business offline for four days. A test restore every quarter is the most underrated routine in IT.

Common questions

The review has a fixed price based on the size of the environment, agreed in advance. Fixes are billed at the hourly rate of DKK 895 excl. VAT or covered by an existing support agreement. Any purchases are always agreed separately.

Those are precisely the companies where we find the most. We can review, fix the gaps and then run the environment under a fixed agreement. You will not need to do anything technical yourselves.

Once a year and always after major changes: an office move, new systems, a new IT lead. In between, regular scanning of the perimeter is enough.

Barely, if it is done in the right order. We test changes on a pilot group, warn staff in advance and roll back if a business system turns out to depend on an old protocol.

Related services

View the whole area

Service GDPR and personal data security Access, logging and encryption for personal data Service Security policies and documentation Policies and procedures people can actually follow Service Security solution deployment Selecting, piloting and rolling out security tools Service Infrastructure protection Perimeter, network zones and secure remote access

Get your environment reviewed

Within a week you will have a prioritised list of weaknesses. We close a good share of them along the way, with no spending on new equipment.

Email
office@apply.dk

Coverage
All of Denmark, delivered remotely

I agree that Apply may handle my details as set out in the privacy policy