IT security for SMEs in Milan, built on the real risk
In Milan we start from the data you hold and the threats that actually concern you, not from a package that is the same for everyone.
The attacks that hit Italian SMEs aren't sophisticated operations.
They're emails impersonating a supplier, credentials reused across several services, remote access left open, a backup nobody has ever tried to restore. The weak spot is almost always the organisation, even before the technology.
That's where our work starts: understanding what you have, what it's worth, who accesses it and from where. Then we put the technical protections in place, write the rules and train the people who have to apply them.
Five fronts, one plan
- 01
Device protectionPCs and servers that defend themselves
SentinelOne on PCs and servers, managed through NinjaOne: it detects anomalous behaviour, isolates the device and, on Windows, rolls back changes made by ransomware.
- 02
Perimeter and accessFirewall, VPN and MFA
A properly configured firewall, a VPN (an encrypted connection) for remote working, and multi-factor authentication (a password plus a code on your phone) on mailboxes and cloud services.
- 03
Separate backupsImmutable, verified copies
Separate, immutable copies, verified with regular restore tests.
- 04
Training and proceduresPeople: the first target
Hands-on training in spotting fraudulent emails, and clear procedures for what to do when something doesn't add up.
- 05
Security testingYour defences, put to the test
Our security testers look for weak spots in your network, websites and exposed services, through vulnerability assessments (searching for known vulnerabilities) and penetration tests (a simulated attack agreed with you). You receive a report setting out what to fix and in what order.
A backup that's never been restored isn't a backup.
Questions worth asking yourself
If more than one answer is “I don't know”, that's where to start.
- 01
If your files were encrypted tomorrow, how quickly could you get back up and running?
- 02
Who has access to company data, and from which devices?
- 03
Do your mailboxes have multi-factor authentication?
- 04
Has anyone ever tried restoring a backup?
- 05
Is there a written incident procedure?
- 06
What happens to someone's access when they leave the company?
Answer the six questions: your result appears here.
From snapshot to ongoing checks
Security has no end date: once everything is secured, we keep checking, every month.
- 01Assessment
We take a snapshot of where things stand: devices, access, backups, points of exposure.
- 02Priorities
We rank the work by impact, starting with whatever reduces risk straight away.
- 03Hardening
We put the technical protections in place and define the access rules.
- 04Ongoing checks
Monitoring, updates and regular checks, with a report every month.
- Report
- Automatic, every month
- what happened, what was blocked, what's still to do
- Technologies
- Fortinet, Zyxel, SentinelOne
- chosen to fit size and risk
- Certifications
- Zyxel- and Fortinet-certified technicians
- and a member of the Microsoft AI Cloud Partner Program
- Who does the work
- In-house security team
- active since 2012, with dedicated security testers
Questions about security
Why isn't installing antivirus enough?
Because antivirus only looks at the computer it's installed on. The attacks we see most often come through a stolen password, remote access left open or a convincing email – and antivirus can't reach any of those.
Does having a backup mean you're safe?
No. It has to be kept separate, protected from changes and tested: we test it every 3 or 6 months.
How can you reduce the risk of ransomware?
SentinelOne on PCs and servers isolates the device and, on Windows, rolls back the changes made by ransomware. Backup copies are separate and cannot be altered. We test the restore every 3 or 6 months.
What if the attack comes at night?
SentinelOne responds on its own, at any hour: it stops the malicious program and quarantines it, without waiting for a technician. From 8am on the next working day, we examine what happened and complete the clean-up.
Do we get a security report?
Yes, an automatic report every month.
Do you check whether company data has ended up online?
Yes, including on the dark web. If we find exposed passwords or data belonging to your company, we let you know, change the credentials involved and check where they leaked from.
How are backups set up?
Copies are stored across multiple European data centres, with redundancy. Frequency ranges from one copy an hour to one a week, depending on device, user and usage. Restores are tested every 3 or 6 months, depending on the scenario.
How is your company's IT really doing?Free IT health check in 12 minutes: score, risks, deadlines and a map of your IT.
Take the free IT health checkWhere to start with security
In forty-five minutes, we'll set out your priorities: what to fix now and what can wait.