Sumatoni builds and develops security across your business: your systems, data, people and working practices. Protection, detection and recovery work towards the same goal: reducing risks and keeping your business running.
Compliance: understand your position and what to improve.
We define the scope around your business: your IT systems, or both IT and industrial and operational systems (IT/OT). The assessment considers how you work and the impact an incident could have on your operations.
We start with a suitable standard or framework, such as ISO/IEC 27001, CyberFundamentals (CyFun) or the IEC 62443 series for industrial systems. An existing audit report can also provide the starting point.
We assess the gaps between your current situation and that reference, then develop a prioritised action plan. You gain a clear view of the gaps and the actions to take, with risks, dependencies and available resources taken into account.
A practical example
Regaining control of a vulnerable environment.
The environment had limited backup coverage, unmanaged equipment and incomplete documentation after several successive interventions.
The initial work addressed the most pressing exposure and improved control of the infrastructure before a wider redesign.
Protection, detection and response form part of the same ongoing support.
A comprehensive approach
Each area strengthens your overall security.
An alert must lead to action. A backup must support recovery. Access rules must follow changes in your team. We connect these elements to make security practical in everyday work.
Organisation and responsibilities
Management has clear priorities and visibility of progress. Security rules, roles and supplier responsibilities are defined so that everyone knows what they need to handle.
Understanding your environment
We inventory devices, software, sensitive data and essential services. This helps identify dependencies, assess risks and focus effort where it matters.
Protecting systems and people
Access management, stronger authentication, updates, network segmentation and data protection form a common foundation. Clear guidance and staff awareness complement the technical measures.
Detection and alert handling
Important events are logged and relevant alerts identified. We organise their review and escalation to the right contacts, according to the tools and monitoring arrangements agreed.
Incident preparation
Contacts, roles and initial actions are prepared: assess the incident, limit its spread, preserve useful information and coordinate communication. Exercises help verify these arrangements.
Recovery and business continuity
Backups are protected and restoration is tested. Services, recovery order and target times are defined according to your needs, then adjusted using lessons from tests and incidents.
How we help
From preparation to ongoing support.
01
Understand your business
We identify the activities to protect, the systems and data they depend on, existing safeguards and the risks to address.
02
Build a robust security approach
Together, we define a security architecture and an action plan. Technical measures, working practices and responsibilities are put in place in a coordinated way.
03
Verify and improve
Checks, restoration tests and incident exercises help assess the measures in place. Their results guide improvements and the agreed ongoing review.
Frequently asked questions
Does everything need to be implemented at once?
The approach is gradual. We first define the target and priorities, then plan the work around its dependencies. Each stage contributes to the whole and is checked.
What is our team’s role?
Management approves priorities and resources. Designated staff help define working practices, procedures and exercises. Sumatoni carries out the agreed technical work and coordinates the people involved.
Can you work with our current tools?
Yes. We assess their configuration, coverage and integration. Suitable solutions are retained; changes address the gaps identified and the chosen architecture.
How do we know our security is improving?
Reviews cover completed actions and their effectiveness: access reviews, vulnerability management, alert assessment, restoration tests and exercises. Results help revise priorities and document progress.
Let’s build security that fits your business.
We start with your environment and priorities to define the protection, organisation and ongoing review your business needs.
