Antivirus and security

Back to services

Endpoint protection is the start, not the product. A green dashboard does not mean the finance laptop has MFA, or that anyone has restored last Tuesday's backup.

Usual scope

• Managed antivirus or EDR on Windows and macOS, with a person looking at the alerts.
• A patch ring for operating systems and browsers. Exceptions written down.
• MFA on mail and admin roles. Legacy auth shut off where the line-of-business app allows it.
• Backup of mail and files, plus one restore test a quarter.
• A short open-items list: links still shared with anyone, machines that still have a local admin.

For a named security lead, see virtual CISO.