Protect the systems your business now depends on.
The more connected your operations become, the more there is to protect. We secure identities, devices, information and cloud environments — pragmatically, in the order that reduces the most risk first, with the Microsoft and Acronis tooling your licences likely already include.
- Identity protected with MFA and conditional access
- Endpoints and servers backed up and recoverable — tested, not assumed
- Email and collaboration hardened against phishing and data leaks
- A security baseline your insurers and auditors recognise
Identity & access
Microsoft Entra ID configured properly — MFA everywhere, conditional access, least-privilege admin and joiner-mover-leaver hygiene.
Protect & recover
Acronis Cyber Protect across servers and endpoints — backup, anti-malware and recovery rehearsals, because the test of security is the restore.
Microsoft 365 hardening
Secure-score-driven hardening of email, sharing and device access — closing the doors most attacks actually walk through.
Data protection alignment
Controls mapped to Botswana's Data Protection Act — consent, access control and audit trails on personal data flows.
We're a small company — are we really a target?
Yes, precisely because attackers assume your defences are weaker — roughly half of small businesses report attacks. The good news: five essentials stop the large majority of real-world attacks — multi-factor authentication, modern endpoint protection, email security, tested backups and staff awareness. You need those five done properly, not twenty products.
Is multi-factor authentication really necessary?
It is the highest-impact control per pula you will ever spend: Microsoft's research puts MFA at blocking about 99.9% of automated credential attacks. It is already included in your Microsoft 365 licence — the work is enforcing it properly, with conditional access and no legacy-authentication loopholes. Cyber insurers now treat it as mandatory.
What do cyber insurers require before covering us?
Three controls have become effectively non-negotiable: MFA on email, admin and remote access; endpoint detection and response on every device; and tested, immutable backups. Just as important is documented evidence of all three — most declined applications fail on proof, not on tooling. We implement the controls and produce the evidence pack.
What does Botswana's Data Protection Act require of us?
The Data Protection Act, 2024 — in force since 14 January 2025 — applies to any processing of personal data in Botswana. It requires appropriate technical and organisational security measures, notification of breaches to the Commission within 72 hours, and a data protection officer for certain categories of processing. Penalties reach BWP 50 million or 4% of global turnover. The technical half of compliance is exactly the security baseline above.
Our staff are the weak link — what do we do about phishing?
Most incidents start with a phished credential, so treat people as a control, not a liability: awareness training with phishing simulations, email filtering in front of the inbox, and MFA behind it so a single click is never fatal. It is inexpensive, measurable, and insurers recognise it.
Platforms: Microsoft Entra ID · Microsoft 365 · Acronis Cyber Protect · Azure