KNOWLEDGE / TOPIC
IT security and emergency preparedness: guides and practical knowledge
Practical IT security knowledge for small and medium-sized companies: measures, backup, emergency plans, phishing, multi-factor authentication and legal requirements such as NIS2. Explained clearly, with concrete next steps.
IT security and emergency preparedness
IT security for small businesses: 10 measures
Small businesses get attacked too, usually in untargeted, automated ways. Ten basic measures lower the risk noticeably without needing a security team of your own.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSBackup strategy: the 3-2-1 rule explained
A backup that cannot be restored is not a backup. The 3-2-1 rule describes how many copies you need, where they should live and how to survive ransomware.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSRansomware attack: what companies should do first
When files are encrypted and a ransom note appears on screen, the first hour counts. This sequence helps limit damage and avoid mistakes.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSNIS2: does the directive apply to my company?
Germany's NIS2 implementation law has been in force since 6 December 2025. Many mid-sized companies are affected without knowing it. Here is how to check whether you are and what to do.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSSpotting phishing: training your staff the right way
Most attacks begin with an email. Employees who recognise phishing and report it without hesitation are one of the most effective protections.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSIntroducing multi-factor authentication (MFA)
A stolen password alone is then no longer enough. MFA is one of the most effective and cheapest security measures. Here is how to introduce it without overwhelming your team.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSServer hardening: basics for Windows and Linux
Hardening reduces the attack surface of a server: fewer services, fewer privileges, secure settings. These basics apply to Windows Server and Linux alike.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSPatch management: secure, predictable updates
Unpatched vulnerabilities are among the most common entry points. A clear patch process ensures updates are installed promptly, tested and without surprises.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSGDPR and IT: technical and organisational measures
Article 32 GDPR requires "appropriate" technical and organisational measures (TOMs). What that means in IT in practice and how to document it traceably.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSPassword policy: length beats complexity
Forced changes every 90 days and cryptic special characters do not make passwords safer. Current recommendations rely on length, uniqueness and MFA.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSSecuring email: SPF, DKIM and DMARC explained
With three DNS records you protect your domain against spoofing and improve email deliverability. Here is how SPF, DKIM and DMARC work.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSBusiness firewalls: basics and rules
The firewall is your network's border control. With clear rules, segmentation and maintenance it offers solid protection even without specialist knowledge.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSCyber insurance: which IT requirements apply
Insurers now ask in detail about your IT security. Those who can evidence MFA, backups and an emergency plan have better chances of cover.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSVulnerability scan or pentest: what is the difference?
A scan finds known vulnerabilities automatically, a penetration test checks whether attackers can actually exploit them. Both have their place.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSHome office and remote work: IT security checklist
Working from home means leaving the protected company network. This checklist shows what companies and employees should consider.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSISO 27001: getting started for mid-sized companies
ISO 27001 describes how an information security management system (ISMS) is built. What lies behind it and what a realistic start looks like.
Read article →Next step
Have a specific question?
Send us a short description of your situation. We will assess it and tell you openly whether and how we can help.
Request a conversation