Protect & recover
Acronis Cyber Protect across servers and endpoints — backup, anti-malware and recovery rehearsals, because the test of security is the restore.
Backup and anti-malware are usually bought as separate tools from separate vendors, which means the backup agent has no idea whether the data it just captured was already infected, and the antivirus has no say in whether last night's restore point is clean. Acronis Cyber Protect closes that gap by running both functions from a single agent across servers and endpoints, so protection and recovery share the same view of what's actually happening on a machine, including active-ransomware detection that can pause and roll back file changes mid-attack.
None of that matters, though, if the restore has never been tested. A backup that has only ever been written to, never read back under pressure, is a hypothesis, not a plan. Rehearsing recovery on a schedule — actually restoring a server or a mailbox and timing how long it takes — is what turns a compliance checkbox into a number you can quote in an incident. That's the real test of a security programme: not whether it stopped everything, but how fast it gets you back.
Active Protection
Real-time, behaviour-based anti-ransomware that pauses and rolls back file encryption mid-attack.
Backup & recovery
Image- and file-level backup for servers, workstations and Microsoft 365, with recovery rehearsals on a schedule.
Vulnerability assessment & patch management
Finds missing patches and applies them centrally, with an automatic pre-patch backup.
Acronis Email Security
Detects and remediates account takeover and phishing, with centralised incident management and automatic account lock for compromised users.
The more connected your operations become, the more there is to protect. We secure identities, devices, information and cloud environments — pragmatically, in the order that reduces the most risk first, with the Microsoft and Acronis tooling your licences likely already include.
Identity & access
Microsoft Entra ID configured properly — MFA everywhere, conditional access, least-privilege admin and joiner-mover-leaver hygiene.
Microsoft 365 hardening
Secure-score-driven hardening of email, sharing and device access — closing the doors most attacks actually walk through.
Data protection alignment
Controls mapped to Botswana's Data Protection Act — consent, access control and audit trails on personal data flows.
We're a small company — are we really a target?
Yes, precisely because attackers assume your defences are weaker — roughly half of small businesses report attacks. The good news: five essentials stop the large majority of real-world attacks — multi-factor authentication, modern endpoint protection, email security, tested backups and staff awareness. You need those five done properly, not twenty products.
Is multi-factor authentication really necessary?
It is the highest-impact control per pula you will ever spend: Microsoft's research puts MFA at blocking about 99.9% of automated credential attacks. It is already included in your Microsoft 365 licence — the work is enforcing it properly, with conditional access and no legacy-authentication loopholes. Cyber insurers now treat it as mandatory.
What do cyber insurers require before covering us?
Three controls have become effectively non-negotiable: MFA on email, admin and remote access; endpoint detection and response on every device; and tested, immutable backups. Just as important is documented evidence of all three — most declined applications fail on proof, not on tooling. We implement the controls and produce the evidence pack.
What does Botswana's Data Protection Act require of us?
The Data Protection Act, 2024 — in force since 14 January 2025 — applies to any processing of personal data in Botswana. It requires appropriate technical and organisational security measures, notification of breaches to the Commission within 72 hours, and a data protection officer for certain categories of processing. Penalties reach BWP 50 million or 4% of global turnover. The technical half of compliance is exactly the security baseline above.
Our staff are the weak link — what do we do about phishing?
Most incidents start with a phished credential, so treat people as a control, not a liability: awareness training with phishing simulations, email filtering in front of the inbox, and MFA behind it so a single click is never fatal. It is inexpensive, measurable, and insurers recognise it.
Platforms: Microsoft Entra ID · Microsoft 365 · Acronis Cyber Protect · Azure