Cyber security for small and mid-sized businesses
Small businesses have no security team of their own, yet attackers need only one weak spot. Security is my day job as a Cyber Security Engineer. I apply the same principles at a smaller scale for you: network, servers, backups and website.
What I can help with
- A firewall and a network split into zones: office, guests, smart devices, servers
- Backups that can actually be restored, including off-site
- Uptime and security event monitoring with alerts
- Secure server and website configuration, updates and maintenance
- Remote access over VPN instead of ports open to the internet
- Separating cameras, printers and other devices from the rest of the network
How I work
I start with a short review: what runs in your business, what is visible from the internet and where the data lives. You get a plain list of risks ordered by what matters most, and a proposal of what to fix first. I then make the changes myself or together with your IT.
Audits and the new Czech Cyber Security Act
I carry out ISO/IEC 27001 audits and compliance assessments against the Czech Cyber Security Act, including the new act implementing the NIS2 directive, which also covers many mid-sized companies under the lower or higher obligations regime. You get a report with findings ordered by severity and a plan to resolve them, and if you like, I will help put it in place.
Why you can trust me with it
Security is what I do every day: I deploy firewalls, SIEM, DLP and identity management, and before that I worked at Raiffeisenbank and EY. On my own infrastructure I run a network split into zones, a SIEM agent on every server and off-site backups. My clients’ websites run on it too.
Who it is for
- Small and mid-sized businesses without their own security team
- Offices and venues with guest Wi-Fi
- Businesses with their own server, online shop or devices on the network
