ICT solutions
Cybersecurity
Security for the systems your organisation depends on, scoped from an assessment of what is actually exposed rather than from a product list.
Security treated as part of the architecture
As physical and digital systems become more connected, cybersecurity stops being an IT concern and becomes part of the wider technology architecture. Cameras, access control, building systems and business applications increasingly share networks and data, and each connection is another path that has to be understood and controlled.
Logitech Consultants approaches cybersecurity through assessment first. We look at how users, devices, networks, applications and data actually connect, identify where the exposure matters most, and agree a scope of work with you. We do not promise a defined outcome before we have seen the environment.
Where protection is applied
-
01
Network security and firewalls
Segmentation and firewall rules that separate business, guest, security-system and management traffic, with rules documented so changes are deliberate.
-
02
Endpoint protection
Protection for the laptops, desktops and servers in daily use, with update and alerting behaviour agreed rather than left at default.
-
03
Secure remote access
Authenticated, encrypted access for staff and support engineers, with permissions limited to what each role needs and activity recorded.
-
04
Identity and access management
Accounts, groups and permissions reviewed and structured so that access is granted by role and removed when a person leaves or changes duties.
-
05
Patching and configuration
A practical routine for operating-system, firmware and application updates, including the equipment that is easy to forget because it never gets switched off.
-
06
Data protection and backup
Backup, retention and restore testing treated as part of security, so a ransomware incident or a failed drive is recoverable rather than terminal.
-
07
Logging and security monitoring
Collection and review of relevant logs and alerts, with a defined route for who investigates and what happens when something looks wrong.
How an engagement is scoped
Assessment comes first
A short assessment establishes the current state: what is connected, how it is addressed and segmented, who has access, what is patched, what is logged and what is backed up. From that we agree priorities with you. Scope, cost and timescale follow the assessment — they are not promised in advance of it.
- Network, firewall and remote-access configuration reviewed
- Accounts, privileges and administrative access checked
- Patch status and end-of-support equipment identified
- Backup coverage and restore capability verified
- Logging and alerting reviewed against what the environment needs
Hardening in priority order
Work is sequenced by risk and by operational impact. Closing an exposed remote-access service or removing shared administrator accounts often reduces more risk than a large equipment purchase, and can be done without disrupting users. Where equipment replacement is the right answer, we say so and explain the reasoning.
Working with the rest of the estate
Cybersecurity touches everything else we design. Security systems and building services are placed on appropriate network segments, integrations are granted only the access they require, and the monitoring that protects the business is extended to the systems that protect the site.
Implementation and support
Security work is delivered with the operational constraints of the organisation in view, and with documentation you can act on afterwards.
- Findings presented in plain language, with the practical consequence of each issue and a recommended order of work.
- Configuration changes made in agreed windows, with the previous state recorded so that a change can be reversed.
- Administrator handover covering firewall rules, account structures, patch routines, backup checks and alert handling.
- Awareness guidance for staff on the behaviours that cause most incidents, delivered as part of the engagement where useful.
- Periodic review of configuration, access and backup status under a support arrangement, so protection does not decay after handover.
Questions we are asked
Are you a certified security operations centre?
No, and we will not present ourselves as one. We design, implement and support security architecture and controls, and where continuous monitoring beyond our scope is needed we will say so clearly rather than imply a capability we do not hold.
Can you guarantee we will not be breached?
No one can honestly guarantee that. What a well-scoped engagement does is reduce the likelihood of common failures, limit how far an incident can spread and shorten recovery. We describe outcomes in those terms rather than as assurances.
Our systems are already installed. Can you still help?
Yes. Much of our work starts with an environment someone else built. We assess what is there, document it, and prioritise the changes that reduce risk most, working within the constraints of equipment that still has service life.
Does this cover the security and building systems too?
It should. CCTV, access control, alarms and building services are frequently connected to the same network as business systems. We include them in the assessment and, where appropriate, separate them so that a compromise in one area does not spread to the other.
How often should the assessment be repeated?
Whenever the environment changes materially — a new site, a new application, a change of provider or a significant staff turnover — and on a regular cycle under a support arrangement. An assessment describes a moment; environments do not stay still.
Related capabilities
Let’s build the right solution
Tell us what you are trying to achieve. We will help you assess the requirement, shape the architecture and identify the technology needed to deliver it.