What is included

The set of mechanisms is chosen to match the requirements: certification needs the full set, practical protection usually needs only part of it.

Discuss the scope

Strong authentication

Login by password plus a token or a card. A password on a note under the keyboard stops being a problem.

Device control

Approved drives on a list, everything else blocked, a log of connections.

Closed software environment

Only approved programs run. Ransomware that reaches such a computer simply does not start.

Integrity monitoring

Tracking changes to system files and configurations.

Resource access separation

Permissions on folders and devices at the level of the protection mechanism, not only of the operating system.

Logging

Every user action is recorded and the logs are protected against alteration.

How the work runs

Deployment goes in stages: the mechanisms are switched on one at a time so their effect on the work can be tracked.

01

Defining the requirements

What is mandatory under the regulations and what we take for real protection.

02

Pilot

Installation on several machines from different departments. Different software behaves differently.

03

Deployment

In stages, with policies tuned for each department.

04

Support

Adding approved programs and devices, reviewing blocked actions.

A closed software environment is the most underestimated measure. Unlike antivirus it blocks not known malware but everything that is not approved, including what is not yet in any database. The price is discipline: every new program has to be added to the list.

Frequently asked questions

Exactly so, and that is the point. For workplaces with sensitive data it is the right approach. Adding a program to the list takes minutes, and the flow of requests usually dries up after the first month.

No. Strong authentication is justified for administrators, the accounts and HR departments and everyone working with personal data. For the rest a sound password policy is enough.

Modern tools of this kind are practically unnoticeable on decent hardware. Problems arise on old machines with mechanical drives, where everything is noticeable, antivirus included.

We will deploy access protection

Tell us what needs covering and how many workplaces there are. We will propose a set of mechanisms and run a pilot.