Practical security reviews
Review an agreed set of accounts, devices, permissions and working practices. You receive clear findings and actions in priority order.
CYBERSECURITY FOR SMEs
Understand the risks.
Protect what matters.
Practical reviews and support to protect your accounts and systems and improve everyday security habits. Clear priorities that fit your business.
Based in Riaz, in the Gruyère region of Fribourg. Remote support and on-site visits throughout French-speaking Switzerland. Other regions by arrangement.
Five areas where we can help.
Account protection
Review access, permissions, multifactor authentication and recovery options. Plan for role changes and departing employees.
System and network hardening
Examine configuration, updates and exposed services. Plan changes, assess their impact and agree on checks and a way to roll back.
Backups and recovery
Check what is backed up, where copies are kept and who can access them. Plan a restore test in an agreed environment to verify that recovery works.
Staff awareness
Work through everyday situations: suspicious messages, passwords, file sharing and how to report a concern. Practical habits your team can put to use.
A review that leads to decisions.
- An authorised scope. We identify the systems, the people responsible and the access needed.
- Clear findings. We distinguish what we observed, what needs checking and the limits of the review.
- Priorities you can act on. You receive a list of improvements, why they matter and any known dependencies.
- An agreed implementation plan. We agree on fixes and how to verify them before making changes.
A review covers the agreed systems at a point in time. It does not certify them or guarantee they are free of vulnerabilities.
Your cybersecurity partner
Iuri Dias has worked in IT since 2015, including banking regulatory technology and pharmaceuticals. In those settings, data confidentiality, access control and continuity of operations are everyday concerns.
That experience shapes his work with SMEs. He looks at how your business operates, identifies weak points and proposes measures within your means. The goal is to help you make informed choices, understand the changes and maintain protections day to day.
EXAMPLE DELIVERABLE
An access review with clear priorities.
For a business reviewing its accounts, the deliverable can include a scope summary, explained findings and a prioritised action list. For a backup engagement, a restore report can record what was recovered, any limitations and the fixes to plan.
Illustrative example. We agree on deliverables and acceptance criteria before starting work.
SOCHacker · SOFTWARE IN DEVELOPMENT
Making everyday security monitoring accessible.
Data theft and ransomware affect organisations in Switzerland and abroad. SMEs also face practical constraints when maintaining their defences: limited time and money, and specialist skills that can be hard to find.
IRDICT is developing SOCHacker to automate routine security checks, explain weak points and help prioritise action. The aim is to give you a daily picture of server security without having to recruit a specialist to run those checks.
Less repetitive work, more consistent monitoring.
The aim is to bring down the time and cost of routine monitoring between individual reviews. Complex situations, incidents and some fixes will still require human expertise.
An affordable target price.
Indicative target: CHF 9 per server per month. This amount is under evaluation. Scope, terms, final pricing and availability will be confirmed before launch.
SOCHacker is in development. The features described are development goals. The software is not yet available and cannot guarantee protection against attacks. IRDICT’s consulting services are available today.
Explore SOCHacker in the IRDICT workshop ↗
Further reading: data theft in Switzerland (NCSC) · European threat landscape (ENISA) · challenges for SMEs (ENISA).
Questions before we start
What does a first security review cover?
We start with a specific scope, such as your team’s accounts, backups or workstation configurations. You receive clear findings and actions in priority order. We agree on the systems and authorised access before the review.
Can you also implement the improvements?
Yes. After the review we can agree on work to implement fixes, including checks and ways to reverse changes. For everyday workstation and tool setup, see our IT support service.
Do you need credentials when I first contact you?
No. Describe your environment and concern without sending passwords or sensitive data. If access is needed, we’ll agree on its scope and a suitable channel. Projects using documents or AI models can also be assessed through our AI and automation service.
Let’s start with a real situation.
Tell us your team size, the main tools you use and what concerns you. Please leave out passwords, credentials and sensitive data. We’ll agree on a suitable channel if needed.
Talk about your situation ↗