Cybersecurity
Hardening, monitoring and staff training against real local threats.
+256 742 020 610, Mon to Fri, 8:00 to 18:00 EAT.
What is in the scope
Practical security for Ugandan organisations: the assessments, fixes and training that stop the incidents that actually happen here, from mobile money fraud to ransomware on shared drives.
- Security assessment and penetration testing
- Hardening and access control
- Staff awareness training
- Incident response
How an engagement runs
From first meeting to hand-over
- Assess
- External and internal testing with a written report ranked by risk.
- Fix
- We implement the fixes, not only recommend them.
- Keep watch
- Monitoring and periodic re-testing.
Equipment and standards
We work with firewalls, endpoint protection, identity management and SIEM tooling.
Before you get in touch
- What does an assessment actually involve?
- A review of access control and configuration, penetration testing, and a written list of what we found, ordered by what an attacker would reach first rather than by what is easiest to fix.
- Is staff training really necessary?
- Most incidents here start with somebody being asked convincingly for a password. Hardening a server does not help when the credentials are handed over, which is why the training is part of the work rather than an add-on.
- What happens if we are breached during the engagement?
- Incident response is part of what you are buying. You call, we work the incident, and you get a written account of what happened afterwards whether or not it reflects well on the configuration.
Also under Run and protect