IT security for SMBs: concept, hardening, checks

IT security

Security with a system

IT security for SMBs does not have to be complicated, but it does have to be systematic. Together with you, we develop a security concept, harden your servers, workstations and network components and regularly check where vulnerabilities exist.

More and more customers require their suppliers to provide evidence of information security – up to and including ISO 27001 certification. We support you in preparing for it. The certification itself is carried out by an independent certification body; we make sure you are well prepared.

You are advised by our IT security specialist, who translates information security requirements into practice for small and medium-sized businesses. Learn more about the people behind Arevano on our team page.

At a glance

Security concept for your business
Hardening of servers and workstations
Regular vulnerability checks
Preparation for ISO 27001
Advice from our IT security specialist
For SMBs and suppliers

Security concept

Assessment, risks and measures in one document – easy to understand, prioritized and tailored to your business.

System hardening

Disabling unnecessary services, applying secure settings, limiting access – for servers, workstations and the network.

Vulnerability checks

We check your systems for known vulnerabilities and outdated software and show you what to fix first.

Path to ISO 27001

Support with policies, documentation and implementation of measures as preparation for the certification audit.

Accounts and permissions

Who may do what? We organize user accounts and permissions so that everyone only accesses what they need for their work.

Personal advice

An IT security specialist as your contact, who answers questions from your customers and auditors together with you.

From security concept to implementation

It all starts with an honest assessment: Which systems and data exist, who accesses them, how are they backed up and what happens if something fails? From this, we create a security concept that names the risks and ranks measures by urgency. That way you know where you stand and which steps bring the greatest benefit.

We then implement the measures together with you – or take them over completely as part of our IT support. This includes, for example, hardening servers and workstations, a firewall with clear rules, separated networks and reliable data backup with a documented disaster recovery plan.

Assessment of systems, data and access
Risk evaluation and prioritized measures
Hardening of servers, workstations and network
Documentation for customers and auditors

Finding vulnerabilities before others do

Software ages, settings drift and new vulnerabilities are disclosed all the time. With regular vulnerability checks, we examine your systems for outdated versions, insecure configurations and unnecessarily open access. You receive a clear report with concrete recommendations instead of a long list of technical alerts – and if you wish, we fix the findings right away.

Support on the way to ISO 27001

If an important customer requires ISO 27001 certification or comparable evidence, we support you in preparing for it: from comparing your current state with the requirements of the standard through policies and documentation to the technical implementation of measures.

Important: we do not certify ourselves. The audit is carried out by an independent certification body. Our job is to make sure you are well positioned for it and can actually meet the requirements in everyday work.

Comparison of current state and requirements
Policies and documentation
Implementation of technical measures
Support up to the audit

How it works

Step by step

1.

Initial conversation

You describe your situation and requirements, such as the specifications of a customer.

2.

Assessment

We look at the systems, access and processes in your company.

3.

Concept and quote

You receive a security concept with prioritized measures and a quote for implementation.

4.

Implementation and review

We implement the measures and regularly check that the level of security is maintained.

Frequently asked questions

Good to know

Do you certify according to ISO 27001?

No. Certification is carried out by an independent certification body. We support you in preparing for it – with assessment, documentation and implementation of the measures.

A customer requires evidence of IT security. Can you help?

Yes. We clarify with you exactly what is required, review your current state and work out the missing measures and documents.

Does a small business really need IT security?

Yes. Attacks also hit small businesses, often precisely because they are less protected. A security concept of the right size protects against the most common risks without slowing down daily work.

How often should vulnerability checks take place?

That depends on your systems and requirements. Regular checks make sense, plus an additional check after major changes – we agree on the right schedule together.

How much does IT security cost?

Prices are available on request. They depend on the number of systems, your starting point and your goal – for example, whether it is a first assessment or preparation for ISO 27001.

Arevano Informatics