Cybersecurity

An attacker needs only one open door. We close them in order.

Cybersecurity for Algerian companies

Attacks do not only target large groups. An SME without serious protection is an easy target, and it is often the one that pays the highest price. We measure your real exposure, then close the doors in the order that matters.

Try the demoDiscuss your project
  • An audit that looks at what is really in place
  • Measures ranked by risk, not by catalogue
  • A clear plan for the day an incident happens

Interactive demo

Replay an attack, and choose where it stops

This is the typical course of a ransomware attack on a company. Switch protections on, replay it, and watch the stage where it is stopped.

Your protections

Scenarios

Course of the attack

  1. 01Phishing emailAn employee receives a fake invoice and clicks the link.
  2. 02Stolen credentialsThe mailbox password is typed into a look-alike page.
  3. 03Remote accessThe attacker enters the network through an access left open.
  4. 04SpreadWith an administrator account, the attacker reaches the servers.
  5. 05EncryptionData and online backups are encrypted.

Log

  • 01Waiting. Choose your protections, then launch the attack.
Impact on the business0 %

Your move

With no protection, the attack goes all the way. Each protection you switch on cuts the chain at one precise stage.

Simplified scenario, for illustration. A real attack has more stages and variants.

What we see

The weaknesses we find almost everywhere

  1. Security treated as a box to tick

    An antivirus installed, a firewall bought, and the matter is considered closed. Nobody checks that it works.

  2. Backups never tested

    The backup runs every night, but nobody has tried to restore it. On the day of a ransomware attack, you find out it is unusable.

  3. Access that is never removed

    Former employees' accounts still active, shared passwords, administrator rights handed out for convenience.

  4. Teams unprepared for phishing

    Most incidents start with an email. Without awareness training, the best equipment is not enough.

Our method

Our approach to securing your systems

We start from the risk to your business, not from a list of products to sell.

  1. 1Security auditA review of workstations, servers, network, access and backups. We record what is exposed and what would happen in an attack.
  2. 2Prioritised action planEach weakness gets a severity level and a measure. Quick, low-cost fixes come first.
  3. 3Protection and hardeningMulti-factor authentication, updates, account separation, workstation protection, isolated and tested backups, network segmentation.
  4. 4Incident preparation and awarenessA written response plan, known to the people concerned, and awareness sessions for your teams.

Deliverables

What you receive

  • An audit report with vulnerabilities ranked by severity
  • A costed action plan, from the immediate measure to long-term work
  • The chosen protections put in place and documented
  • An incident response plan: who does what, in what order
  • Awareness materials and sessions for your staff

Who it is for

This service is for you if

  • You have never had your security checked by a third party
  • You or a peer in your sector have been hit by ransomware or email fraud
  • A customer, a prime contractor or an auditor is asking you for assurances
  • You process personal data and have to show that it is protected
Discuss your project

Take stock

Eight basic measures: where do you stand?

For each measure, say whether it is in place at your company. Your answers stay in your browser.

Question 1 of 8

Multi-factor authentication is enabled on email and remote access

Why Gnosis

What you get by working with us

Advice independent of vendors

We are not tied to any software vendor or hardware manufacturer. The recommendation starts from your need, not from a catalogue.

A written scope before any commitment

Scope, priorities, budget and schedule are set down in writing before the first day of implementation.

Local delivery, by a team in Algiers

A team based in Algiers that knows the country's regulatory, human and infrastructure constraints.

Straight talk on what is feasible

If a project does not have the means to succeed, we say so before it starts.

Frequently asked questions

What we are asked before we start

Is an SME really a target for cyberattacks?

Yes. Most attacks are automated and do not pick their victim by size. They look for email without two-factor authentication, an exposed remote access or a reachable backup, and SMEs often have them.

What does a security audit involve?

We examine your workstations, servers, network, accounts and backups, then assess what an attacker could reach. The report ranks the weaknesses by severity and states the fix for each one.

Do we need to buy new equipment to be protected?

Often not. Much of the protection comes from configuring what you already own and from a few practices: two-factor authentication, updates, tested backups, limited rights.

What should we do if we are attacked?

Isolate the affected machines, do not switch them off without advice, alert the designated person and do not pay in a rush. This is exactly what the incident response plan sets out, so that the decision is not improvised.

Further reading

Our articles on the subject

Our other services

All services

Know your exposure before an attacker finds it

Tell us about your context. We will tell you what an audit would look at first in your case.

Discuss your project