Discuss your project
Cybersecurity

Cybersecurity services

Most incidents start with something ordinary: a phishing email, a reused password, an unpatched laptop. We close those gaps, then keep watch with 24/7 monitoring and support for managed-service clients.

Discuss your project How the work is delivered

A good fit if

  • You hold personal, financial or health data and must show customers, insurers or regulators it is protected.
  • Your insurance renewal asks about MFA, EDR, backups or training, and answers are unclear.
  • You rely on antivirus and a firewall, and suspect that is no longer enough.
  • You lack security specialists or need monitoring help, and want one provider from assessment to monitoring.

What is included

  • Assessment of identities, devices, email, network, backups, cloud; risks ranked by likelihood and impact
  • Prioritised remediation plan with owners, effort estimates and quick wins
  • MFA and conditional access for email, remote access and admins
  • EDR deployed, tuned and monitored on workstations and servers
  • Email filtering, SPF, DKIM, DMARC; impersonation and payment-fraud protection
  • Awareness training, phishing simulations and a rehearsed incident response plan

What we cover

A single project or ongoing managed security, both starting the same way: we find gaps, fix what matters most, train people, prepare for incidents and keep watch.

Security assessments

Find and rank your risks.

EDR

Detect and contain attacks on laptops and servers.

Email security

Against phishing, impersonation and payment fraud.

Awareness training

Staff who recognise and report scams.

Compliance readiness

Data protection (NDPA), sector rules and insurers.

Incident readiness

Plan, contacts and tabletop, so the first hour is not spent finding who to call.

Tools we work with, chosen for your environment, licences and budget, after checking what you own:

  • Microsoft Defender
  • CrowdStrike
  • SentinelOne
  • Fortinet

Nigerian obligations

WhoWhat they expect
NDPA 2023 (NDPC)Appropriate security for personal data; notify the Nigeria Data Protection Commission within 72 hours of becoming aware of a breach likely to risk people's rights and freedoms. GAID 2025 sets out how it applies.
Cybercrimes Act, ngCERTIncident reporting for critical national information infrastructure operators; the National Cybersecurity Policy and Strategy sets direction, with NITDA guidance for public institutions.
CBN and sector regulatorsCBN cybersecurity framework and guidelines for banks and payment service providers; insurers, pension and capital-market operators have their own regulators.
Cyber insurersMFA, EDR, email security, tested backups and training, before issuing or renewing.

Plan security work with these in mind; we help you meet them in practice. General terms only, not legal advice: your counsel confirms what applies.

Mistakes we see most often
  • Antivirus alone, with no one reviewing alerts.
  • MFA on some accounts but not administrators, remote access or older email protocols.
  • Shared administrator accounts, or every user a local administrator.
  • Backups never restored, or deletable with the same stolen password (see backup and disaster recovery).
  • No written plan for who decides what during an incident.
  • Training as a once-a-year video instead of a habit.

Part of your wider IT

The team that monitors your devices also patches them, manages accounts, fixes what alerts uncover and advises when you buy systems or sign vendor contracts. See managed IT, help desk, IT consulting and network support; implementation and on-site support by arrangement. For AI, we find unapproved tools, protect data entered into them and test AI applications for prompt injection and leakage (AI governance).

What managed security gives you
  • Focus: your team is not pulled away to chase alerts.
  • Layered protection for your business and data against unexpected problems and intruders, not a single product.
  • Security that fits how people work: MFA and conditional access rolled out in stages, so productivity does not suffer.
  • Predictable costs: a monthly service with scope in the agreement, sized to your organisation and budget; estimates in naira (or US dollars where a licence or service is priced in dollars).
  • Someone always watching: round-the-clock monitoring of key infrastructure, computers and servers, holidays included, for managed-service clients.
Delivery

How the work is delivered

  1. Assess

    Review identities, devices, email, network, backups and cloud against a recognised baseline, with the people who run them.

    Output: Risk register and ranked findings.

  2. Plan

    Agree what to fix first, weighing risk, cost and disruption to staff.

    Output: Remediation roadmap.

  3. Harden and deploy

    Roll out MFA, EDR, email protection and configuration changes in stages, pilot group first.

    Output: Deployed controls and change log.

  4. Train and rehearse

    Train staff, run phishing simulations, and walk leaders through a realistic incident.

    Output: Training records and tabletop findings.

  5. Monitor and improve

    For managed-service clients, 24/7 monitoring of in-scope systems and triage, reviews of new risks; response targets in the agreement.

    Output: Monitoring reports and updated roadmap.

Scope at a glance

Not included unless agreed

  • Security licences and hardware, billed separately or bought directly
  • Legal advice, filings, breach notifications (yours; we help prepare), certification
  • Litigation forensics (specialist firm) and systems outside the agreed scope

What we need from you

  • Named admin access; one approver for changes and risk decisions
  • Asset list (or time to build one) and insurance documents
  • Staff time for training and for testing changes before enforcement

Before handover

  • Each control tested: MFA prompts appear, EDR alerts actually fire
  • Pilot first with rollback; admin access reviewed, shared accounts removed or documented
  • Every changed setting documented with its reason; incident plan rehearsed

What affects the cost

  • Users, devices, servers and locations
  • Microsoft 365, Google Workspace, on-premises or cloud
  • Remediation found; regulator, client or insurer documentation
  • Ongoing monitoring or a one-time project

No package prices: estimates in naira from an agreed scope, taxes shown separately.

Questions buyers usually ask

Is antivirus not enough?

Traditional antivirus mostly blocks known malicious files. Many attacks now use stolen passwords, legitimate administration tools and email fraud, which antivirus does not see. EDR, MFA and email protection close much of that gap.

Can you help with our cyber insurance questionnaire?

Yes. We explain what each question asks, check what is actually in place and help you close gaps before renewal. The answers remain your organisation's, so we never guess on your behalf.

What happens if we have a breach?

Contain first, then assess. If personal data is involved, the NDPA expects the NDPC to be notified within 72 hours where the breach is likely to risk people's rights and freedoms, and affected people told without undue delay where the risk is high. We gather the facts; your counsel advises. Not legal advice.

Not sure where your biggest security gaps are?

Tell us about your systems, your team and any insurer or regulatory requirements. We will reply to arrange a conversation about where to start.

Discuss your security