We are Passionate About IT Security

In2secure believe that all organisations should be able to access good, pragmatic and approachable Cyber Security advice to ensure that any solution is right for your needs.

 

About In2secure

At In2secure limited, we specialise in offering Cyber Security services throughout Northamptonshire and beyond, aimed at small businesses and there to help keep your organisation safe from cyber threats to your business .

We believe that doing the basic things well, which should help you prevent being a victim of crime. This is why we whole heartedly believe in offering Cyber Essentials.

With cyber criminals always finding new ways to attack businesses and steal valuable data and money, the importance of knowing you have the most up-to-date, effective cyber security measures in place is essential. As an IASME Licensed Certification Body, you can be certain that by using In2secure limited for your cyber security requirements, you will have the cyber defences in  place to help thwart the a range of cyber attacks.

How to secure your information

Our Approach to Security & Prevention

Click on an item on the NIST Cyber Security Framework to help you understand what you need to do.

The buttons to the right shows stages in the NIST Cyber Framework. It’s a series of steps for helping you identify your assets, manage your risks, and respond and recover from potential or actual incidents.

Identify

This is about getting the lay of the land. Understanding what assets you have in place, how you need to safeguard them, what governance you need, how you work out scoring risks and what the risk appetite should be.

Example. Pretend you own a jewellers with fancy jewellery. You need to understand what you have, who might want to get it and how they go about getting it. At this stage we could start putting our jewellery into costs bands (less than 100 pounds, upto 2,000 pounds and then more).

Protect

Now you are looking to deploy and implement controls for the organisation, building on what we know (what we need to protect and how much we need to protect it). This may be through the use of people, process, technology or physical controls.

Example. With our jewellers we are going to have alarms in place. We are also going to keep the really expensive jewellry in a safe and make it ‘on demand’ to view. The moderate priced pieces are to remain behind glass while the cheaper pieces are to be on display. We will keep the door locked and restrict customers in the shop when the safe is open.

Detect

We know what we need to protect and we know what we need to do to protect it.  Now we need to know how we could detect if something either goes wrong or has the potential to go wrong.

Example. We have some brilliant processes in our jewellery shop that our owners and insurance company are happy with. However, we need to make sure everyone follows these processes. We need to identify when the safe is not locked (it should be locked all the time when access is not required). The door should be locked when we have viewings, the glass cabinets should be locked when not accessed and the alarm should always be set when the shop is closed (like at night). Detecting when this doesnt happen will help protect the jewellery.

Respond

This is about taking action if something either goes wrong, or has the potential to go wrong.

Example. In our jewellers, if the safe is not locked, we may need to educate staff or issue warnings. We may need to review the processes to make sure that it is documentated and that staff can understand what they need to do. If the alarm goes off, we need to investigate, rather than ignore. If there is a burglary – we need to know straight away what was taken and how our system was compromised.

Recover

Dealing with our actual (or potential) incident, making sure that we know what went wrong and reducing the likelihood of it going wrong again.

Example. People gained access to the jewellery shop though, after a short time, they fled the scene as the alarm was causing a commotion. Having reviewed the incident, the company have decided to add a support and monitoring contract to the alarm, together with CCTV monitoring by a security company.

Get In Touch with In2secure

Need consultancy, help or advice. Need someone to validate what could be considered a ‘gut concern’ ? Then get in touch with In2secure and see how In2secure could be your trusted security partner.