Cybersecurity services
Cybersecurity covers far more than the cloud. It includes your people, laptops and phones, office networks, websites, data and physical sites. We find where you’re exposed, protect what matters most, watch for threats, and help you respond and recover when something goes wrong.
At a glance
- First step
- A security assessment
- Covers
- People, devices, networks, cloud, websites, offices and data
- Training
- In English, Kinyarwanda or French
- Local law
- Rwanda’s personal data protection law, Nº 058/2021
What we do
We organise our work around four questions: what are your risks, how are you protected, how quickly would you notice an attack and recover, and are your people prepared?
Identify
Know your risks and set the rulesSecurity assessment
A review of your people, devices, networks, cloud services, websites and backups, with a plan that ranks fixes by risk.
Policies and risk management
Practical security policies, a risk register, and clear roles, so security decisions don’t depend on one person.
Compliance and data protection
Technical safeguards and documentation for Rwanda’s data protection law, and preparation for standards such as ISO/IEC 27001.
Protect
Close the doors attackers useAccounts and access
Multi-factor sign-in, password rules and tighter admin access. These controls stop most account takeovers.
Laptops, phones and email
Protection, updates and encryption for devices, plus filtering for phishing and malware.
Networks and firewalls
Firewalls, separate guest Wi-Fi, secure remote access and safe links between sites.
Cloud security
Secure settings for Microsoft 365, Azure, AWS and Google Workspace: sharing, admin roles and audit logs.
Websites and applications
Secure hosting, updates and configuration for websites and business applications, including the ones we build.
Physical security
CCTV and access control for offices and sites, connected securely to your network.
Detect and respond
Spot problems early and recover fastMonitoring and alerts
We watch sign-ins, devices and systems for warning signs and act on alerts.
Vulnerability management
Regular scans for missing updates and weak settings, with fixes ranked by risk.
Incident response
A written plan, a clear list of who to call, and hands-on help to contain an incident and get back to work.
Backup and recovery
Off-site backups with restores tested regularly, so ransomware or a failed disk doesn’t stop the business.
People
Your staff are part of your defenceAwareness training
Practical sessions for staff on phishing, passwords, fraud calls and safe handling of data.
Phishing tests
Simulated phishing emails that show who needs more support, followed by short refresher training.
Leadership briefings
Plain-language sessions that help directors and boards understand their security risks and decisions.
What an assessment looks at
You get a written report in plain language, with each finding ranked by risk and a suggested fix.
- Accounts and sign-in. Who has access, admin rights, MFA, password rules.
- Laptops and phones. Updates, protection software, encryption, lost-device plans.
- Email. Phishing filters, spoofing protection, forwarding rules.
- Network and Wi-Fi. Firewall, guest access, remote access, router settings.
- Cloud services. Sharing settings, admin roles, audit logs.
- Backups. What is backed up, where, and whether restores work.
- Staff. How people handle suspicious emails, calls and data.
- Websites and apps. Hosting, updates, admin access, HTTPS.
- Offices. Physical access, CCTV, server and network cabinets.
- Suppliers. Which outside companies can reach your systems.
- Personal data. Where it is stored and who can see it.
How we can work together
Assessment
A clear, honest view of where you are exposed.
- Findings ranked by risk
- Quick fixes you can make straight away
- A 90-day improvement plan
Fixing the gaps
We put the controls in place and check they work.
- MFA and account clean-up
- Device and email protection
- Backup and recovery set-up
- Staff awareness training
Ongoing protection
Security needs regular attention. We help you keep it up.
- Alert monitoring
- Vulnerability scans and updates
- Incident response support
- Regular phishing tests
- Periodic reviews
Frameworks we use
We base our work on established security frameworks and scale them to the size of your organisation.
- CIS Critical Security Controls
- NIST Cybersecurity Framework
- ISO/IEC 27001
- Rwanda Law Nº 058/2021
Data protection in Rwanda
Law Nº 058/2021 on the protection of personal data and privacy applies to every organisation that handles personal data. We put the technical safeguards in place and work with your legal advisers on the rest. Ask us how.
Frequently asked questions
We’re a small organisation. Are we really a target?
Yes. Most attacks are automated and look for weak passwords and unpatched systems, not well-known names. Smaller organisations often have fewer defences, so the basics matter even more.
Where should we start?
With an assessment. It shows what you have, where the real risks are, and which fixes give the most protection for the effort. Usually these are MFA, backups, updates and staff awareness.
Will security slow our staff down?
It shouldn’t, if it’s set up well. We prefer low-effort controls such as app-based sign-in approvals and single sign-on, and our training explains why each change matters so people don’t work around it.
Can you train our staff in Kinyarwanda?
Yes. Awareness sessions are available in English and Kinyarwanda, with French on request, in person or online.
Talk to us about your project
Start with a short call. Tell us how your organisation works today and what you want to change, and we’ll suggest a sensible first step.