Cybersecurity in Amersfoort: the measures that matter most for small offices

Q: What if something has already happened?

Contact us straight away. We help with limiting the damage, recovering and preventing a repeat.

A small business does not have to secure everything to remove a lot of risk. A handful of measures keeps most attacks out or limits the damage.

Request a quote Schedule a call

Why

Small businesses in Amersfoort get attacked too

Most attacks are not aimed at your business. Automated attempts try email addresses, passwords and open systems until something is open. A small office with an unpatched laptop or an employee who clicks on a fake invoice is just as suitable for such an attempt as a large corporation, and has less time to recover from the damage.

For advisers, accountants, estate agents and healthcare practices there is also the responsibility for client and patient data. A breach then disrupts the work and may also mean a report to supervisors and to the people concerned.

The five

Five measures that make the difference

There is a lot to arrange in security. For a small office we almost always start with the same five points, because they cover most of the risks.

Multi-factor sign-in for email and files. A stolen password is then not enough. This is the single measure that prevents most account takeovers.
Updates that are actually carried out. Operating systems, browsers and programs that are up to date close known holes. In an office without management that too often does not happen.
A backup that is stored outside the office and tested. If everything is encrypted or wiped, this is the only way out that is not about ransom.
Limited permissions. Not everyone needs administrator rights. The fewer, the less damage a hijacked account can do.
Attention to phishing. A short explanation to your team of what a fake email looks like, and a way to report doubtful messages without losing face.

Secured laptops and phones

Disk encryption, screen lock and the option to wipe a lost device remotely.

Monitoring of sign-ins

A notification when someone signs in from an unexpected place, so a hijacked account becomes visible quickly.

Secure email traffic

Settings that stop forged senders and encrypt sensitive messages.

If it goes wrong

What to do after a suspected attack

A good plan prevents you from doing the wrong things in a panic. This is the order we use, and you can print it and hang it by the coffee machine.

Disconnect the device from the network, but do not switch it off. That preserves evidence and stops the spread.
Contact us before you restore or pay anything. We look at what happened and what is still safe.
Change passwords of the accounts involved from another, clean device.
Discuss reporting. If personal data is involved, many businesses have a duty to report to the Dutch Data Protection Authority. Reporting to the police can also be sensible.
Restore from your backup once it is clear how the attacker got in, so that it does not happen again.

NIS2 and GDPR

Does my business fall under new rules?

The GDPR applies to almost every business that processes personal data. The European NIS2 directive applies only to organisations in certain sectors and above a certain size, or as a supplier of such an organisation. Whether you fall under it depends on your sector and size, and is best checked with a lawyer or your trade association.

What we do is set up the technology so that you can meet the reasonable requirements, and help you with the facts you need for such an assessment: which systems you use, where data is stored and which measures already exist.

Read on

More about security

Frequently asked questions about cybersecurity in Amersfoort

Where should I start as a small business?

With multi-factor sign-in on your email and a backup that is stored outside the office and tested. Those two cover a large part of the risks. After that we look at updates, permissions and awareness.

Is an antivirus program enough?

No. An antivirus program helps against known malicious files, but most attacks start with a stolen password or a forged email. That is why multi-factor sign-in and training are so important.

What does security cost for an office with ten employees?

That depends on what you already have and what you need. Many basic measures are already in licences you pay for, such as Microsoft 365, and only need to be set up properly. After a short inventory you receive a proposal.

Do you also train employees?

We can give a short explanation of phishing and safe working, fitting the way your team works. A short session with examples from practice works better than a long presentation.

What if something has already happened?

Working together

Let us see what your business needs

Request a quote or schedule a call. We usually reply within one working day.