01 · Cybersecurity
Secure what matters, without blocking the business.
From audit to daily operations: we lock down sensitive access, protect workstations and servers and fix vulnerabilities, with tools we administer ourselves.
Day rate, full-time or part-time, or a fixed-price short assignment (audit, opinion). On site in Belgium or remote.
Who it is for
Protect access, fix vulnerabilities, make progress on NIS2.
Banks, credit institutions, SMEs and organisations in scope of NIS2 that want a real level of security, not just a documented one.
Most incidents go through a poorly protected privileged account, an unpatched workstation or an access that was never revoked. That is where we focus the effort: identities, access, endpoints, patches.
Since 2023, we have worked in production security at a credit institution of a large banking group: privileged access, identities, endpoint protection, patching. The methods we propose are the ones that stand up to an audit.
01 · Cyber
Our areas.
- 01
PAM with CyberArk
Account vault, secret rotation, recorded sessions, just-in-time access. Deployment, account onboarding and operations.
- 02
IAM, SSO and MFA with Keycloak
Single sign-on, MFA, OIDC and SAML federation, account lifecycle. Fewer passwords, more traceability.
- 03
Endpoints and servers
Endpoint protection (McAfee ePO and equivalents), patch management, vulnerability remediation, Windows and Linux hardening.
- 04
Audit and action plan
Assessment of access, endpoints, Microsoft 365 and applications, prioritisation by real risk, costed action plan.
- 05
NIS2 and GDPR compliance
Policies, register of measures, compliance plan and follow-up. Nothing theoretical: measures that can be operated.
- 06
Active Directory and Microsoft 365 hardening
Review of privileged accounts and groups, conditional access policies, logging and alerting. The settings that close the doors attackers use most.
Deliverables
What it includes.
- 01 Prioritised audit report and costed action plan
- 02 Documented PAM and IAM architecture, onboarded accounts
- 03 Security policies and operating procedures
- 04 Follow-up dashboard: patches, vulnerabilities, access
- 05 Team training and awareness
Tools we master
- CyberArk
- Keycloak
- Active Directory
- Microsoft 365
- McAfee ePO
- Ivanti
- PowerShell
Frequently asked questions
Before you write to us.
01 Where do we start?
With a short audit, one to two weeks, that ranks the real risks and leads to a costed action plan. Quick wins (MFA, backups, patches) are put in place from the first days.
02 How do we know if NIS2 applies to us?
The directive targets specific sectors and company sizes. Our note “NIS2 in Belgium: the checklist” lets you check in ten minutes; we then confirm during the first call.
03 Do you step in after an incident?
Yes, to contain, restore and document. It is better to start before, though: an incident always costs more than an audit.
04 Are you available now?
We are currently on assignment. Write to us about an upcoming need: we reply with a realistic availability date.
A need that fits no box?
Write to us anyway. If we are not the right people, we will tell you and point you in the right direction.