Service
Practical IT security, without the scaremongering
Most incidents start with a stolen password, an unpatched device or one permission too many. I close those doors with concrete measures, ordered by risk and explained without jargon.
Signs you need it
- Not every account has multi-factor authentication (MFA).
- If a laptop goes missing, you don't know whether its data is encrypted.
- Nobody checks which devices are out of date.
- You get asked about NIS2 or the security of your systems and don't know what to answer.
What I do
- MFA and conditional access in Microsoft 365 and Entra ID.
- Devices managed with Intune: compliance, updates and BitLocker encryption.
- Microsoft Defender configured and reviewed.
- A password policy and a password manager for the team.
- A segmented network so that an incident doesn't spread.
I don't provide user support or device maintenance: your provider does that.
Experience
Real projects from my career as a systems engineer.
- Conditional access and MFA, and renewal of the corporate certificate authority (CA).
- Intune device compliance, BitLocker encryption and SAML single sign-on.
- Spain's National Security Framework (ENS) policies applied through GPOs and change management.
How I work
The same method in every area: understand first, then decide and, finally, do.
Review
I review what you have, without touching anything, and tell you what works and what doesn't.
Plan
Priorities by risk and cost, in writing. A project with a fixed scope and price, or as part of the monthly engagement.
Execution
I do it myself, or coordinate it with your provider, with planned changes.
Follow-up
I check that everything keeps working and leave it documented.
Frequently asked questions
Is this an audit or a certification?
No. It's a technical review with a prioritised improvement plan. If you need a certification later on, you start with the work done and documented.
Does NIS2 apply to me?
It depends on your sector and size. I explain it in my NIS2 guide (in Spanish) and we look at your case on the call.
Will this get in my team's way?
As little as possible. MFA and device management are rolled out in phases, with notice and clear instructions.
How do I hire you and how much does it cost?
A project with a fixed scope and price, or as part of the monthly engagement. Before starting I send you a written proposal with the scope and a fixed price. The first call is free.
Other areas
Microsoft 365
Email, Teams, SharePoint and access, organised and protected.
Windows Server and Active Directory
Servers, domain and policies kept up to date and documented.
Virtualisation and backup
Virtual servers and tested backups, with a recovery plan.
Networking
Firewall, VPN, Wi-Fi and a network separated by use, with monitoring.
Automation and AI
PowerShell, n8n and AI agents for the tasks that repeat.