04IT & security

Cybersecurity for companies.

Protection against attacks, data loss and unauthorised access, in several layers: network, devices, access, backup and team. Tailored to SMEs, compliant with Swiss and EU data protection law.

Threat landscape

Cyberattacks hit SMEs too

Ransomware, phishing and data leaks hit SMEs just like large companies, except that no in-house IT department intercepts the attack. Prevention costs a fraction of a recovery.

My approach

Several layers

Network, endpoints, access controls, backup and a trained team. No single tool protects everything; if one layer fails, the next one holds.

Services

Protection in layers

Firewall systems

Business firewalls from Sophos or Fortinet inspect traffic and divide the network into zones so that an incident does not reach everything.

Sophos & Fortinet·Intrusion detection·Segmentation

VPN & remote access

Home office and field staff encrypted into the company network, with a second factor.

Site-to-site & client VPN·Zero-trust access·MFA

Endpoint security

Laptops, desktops and mobile devices protected with EDR: the software recognises behaviour, not just known signatures, and stops ransomware before it encrypts.

EDR/XDR (Sophos Intercept X)·Device encryption·Patch management

Passwords & access control

Password manager, multi-factor authentication and single sign-on against the most common point of entry: stolen credentials.

Password manager·Multi-factor authentication·Single sign-on

Data protection & policies

Comply with the requirements of the Swiss Data Protection Act (revised 2023) and the GDPR, with clear policies and matching technical measures.

Policies & documentation·Team training·Processing register

Monitoring & incident response

Detect anomalies early and respond according to plan in an emergency: who does what, who is informed, what is restored first.

Security monitoring·Incident response plan·Audits

In practice

Why prevention pays off

Follow-up costs

After a ransomware attack you pay three times: for the recovery, for the downtime and with the trust of your customers.

Human factor

In the incidents I have seen at SMEs, the entry point was almost always a phishing email. Technology alone is not enough; the team has to know the patterns.

Legal obligation

The Swiss Data Protection Act requires appropriate technical and organisational measures and provides for fines of up to CHF 250,000, personally against those responsible. Anyone with customers in the EU additionally falls under the GDPR.

FAQ

Frequently asked questions

Why are SMEs an attractive target?
Because there is often less protection and no in-house IT department, while the data is just as valuable: customer data, bank details, quotes. And because a two-week outage hits an SME harder than a large company.
Why is an antivirus no longer enough?
Classic antivirus programs only recognise known malware. Endpoint security with EDR/XDR observes the behaviour of processes and also stops new attacks before damage occurs.
What does data protection compliance mean for IT?
Swiss and EU data protection law require technical and organisational measures: encryption, access controls, password policies and documentation. I implement that and document it so that you can present it when asked.
How do I recognise a compromise?
Slow systems, unknown processes, unexplained data transfer or locked files are typical signs. Many attacks nevertheless go unnoticed for weeks; monitoring reports anomalies before anyone sees them.

Contact

Request a security analysis.

I look at your IT security situation and show where the biggest risks lie. Without obligation and in confidence.

Phone
Email
Reply
Usually within 24 hours

How your data is handled: privacy policy.