Five things that do most of the work
Security is not one purchase. These five layers, done properly, deal with the overwhelming majority of what actually happens to businesses of your size.
Identity
Most incidents start with a password, not a firewall. Multi-factor authentication, conditional access and a managed password manager reduce the risk of unauthorised access more than anything else on this list.
Devices
Managed laptops and desktops with enhanced antivirus (EDR), patching on a schedule and encryption enabled. If a device is lost, it stops being a data problem.
Filtering that blocks the obvious, plus correct SPF, DKIM and DMARC records so nobody can send mail that looks like it came from your business.
Data and recovery
Backups that are tested, not just scheduled. The question is never whether a backup ran, it is whether you can be working again by Tuesday.
Visibility
Monitoring and vulnerability scanning so unusual activity is noticed by someone whose job it is to notice, rather than by a staff member on a Monday morning.
Your team
Short, regular awareness training so people can spot a convincing phishing email. It is the cheapest control you can buy and it consistently pays for itself.
POPIA, practically
Most of what POPIA asks of a small business is good IT practice written down: know what personal information you hold, control who can reach it, and be able to tell when something has gone wrong.
We help with the technical side of that, and we are clear about where our work ends. bluecoat IT is an IT company, not a law firm.
Know where data lives
Documented systems, accounts and access, kept current rather than rebuilt in a panic.
Control access
Correct permissions, removed promptly when someone leaves. This is where most businesses slip.
Notice incidents
Monitoring and alerting, so a compromise is something you detect rather than something you are told about.
Find out where you actually stand
A security review gives you a clear picture of your current position and a prioritised list of what to fix, with costs.