Advisory

Find the gaps before an attacker does.

Fixed-scope reviews, tests and workshops that show where your business stands, in plain language, with a clear plan for what to fix first.

Security assessment

Know where you stand before someone else tells you.

A structured review of how your business is protected: your computers, your Microsoft 365 or Google accounts, your backups, and who can access what.

You get a written report that ranks what to fix first by how likely it is to hurt you, not by how impressive it sounds. Written for an owner, managing partner or founder, not just an IT person.

Endpoint, account and backup review
Prioritized findings in plain language
A practical plan you can act on

Microsoft 365 security review

Your email and accounts are the front door. Check the lock.

A stolen Microsoft 365 sign-in can open your email, files and finances at once. We review how your tenant is set up: who has multi-factor authentication, who holds admin rights, which sign-in methods are switched on, and whether mail is quietly being forwarded somewhere it shouldn't be.

Multi-factor authentication coverage and admin accounts
Risky sign-in settings, including device code sign-in
Mail forwarding rules and third-party app permissions
Findings ranked, with the fixes spelled out

Once it's fixed, Managed ISPM keeps it that way.

Phishing baseline test

See who would click, before a real attacker finds out.

We send your team a realistic, harmless phishing email and measure what happens: who opens it, who clicks, and who enters a password. You get a baseline to measure training against, reported by team rather than to single anyone out.

A realistic simulated phishing email
Results by team, with the patterns that matter
A starting point to track improvement

Ongoing training and tests continue with Managed SAT.

Incident readiness workshop and training

Decide who does what before the 2 a.m. phone call.

A guided tabletop exercise for owners and key staff. We walk through a realistic incident, such as ransomware spreading overnight or a hijacked email account, and work out who decides, who calls whom, and what gets shut down first.

Then we train the people involved on their part, and write it up as a short incident plan your team can actually follow.

A scenario-based tabletop exercise
Roles, contacts and decisions written down
Training for the staff with a part to play
A short, practical incident plan

After-hours exposure check

What's reachable from the internet while you sleep?

Attackers favour nights, weekends and holidays, when nobody is watching. We check what your business exposes to the internet, such as remote desktop, VPNs and admin portals, and which remote-access tools are installed on your computers, then tell you what to close or lock down.

External exposure of your systems and services
An inventory of remote-access tools on your computers
A prioritized list of what to close

See what hits our own server on the live threat map.

Log and retention review

When something happens, will the evidence be there?

An investigation, an insurance claim or a legal question all depend on logs: who signed in, what changed, what was sent. We review what your systems record today, how long it's kept, and whether that's enough to reconstruct an incident.

Sign-in, email, firewall and endpoint logs
How long each is kept, against what you're likely to need
The gaps, and how to close them

Managed SIEM collects your logs and keeps them for you.

Find out what's actually protecting your machines tonight.

Thirty minutes. We'll look at how your computers are covered today, what would happen if one were compromised after hours, and where the gaps are. A plain answer either way.

Book a security call →

Or email sales@rrcyber.ca