ITSecurity
Security & compliance
Security you can prove.
Butler Office reviews, monitors and improves the security of your IT – with audits, vulnerability scans, training, contingency planning and penetration tests.
Starting point
The question is not whether you are interesting enough. It is whether you are prepared.
Attacks on small companies are rarely targeted. They are automated: what is being looked for is open doors – an outdated plugin, an account without a second sign-in factor, remote access with a weak password. Anyone who has such a door will be found, regardless of size and industry.
At the same time, external requirements are rising. Cyber insurers ask detailed questions, customers demand evidence, and the Swiss Federal Act on Data Protection expects appropriate technical measures. Many businesses cannot give a robust answer to this today.
We create that answer: factually, without scaremongering and in an order that achieves the greatest effect with reasonable effort.
What Butler Office takes on
Detect, protect, practise.
Security is not a product but a state that is maintained. We support you once with a status assessment or on an ongoing basis.
Vulnerability scans
We check your systems from the outside and from the inside for known vulnerabilities, missing updates and insecure configurations. You receive an understandable report with prioritised measures – and, on request, the implementation along with it.
Security monitoring & logging
Suspicious sign-ins, unusual access or malware on a device should be noticed. We set up monitoring and central logging so that incidents can be detected and traced afterwards.
Audits
Three perspectives, depending on need: the infrastructure with network, servers and access; the Microsoft 365 environment with sign-in, rights and sharing; and the website with updates, configuration and extensions. A permission review is always part of it: who is allowed to do what – and why?
Awareness & phishing simulations
Most incidents begin with an e-mail. We train your staff in a practical way and use simulated phishing messages to check whether what has been learnt takes hold in everyday work – without exposing anyone.
Backup concept, contingency plan & tests
We draw up a backup concept and test the recovery. The contingency plan sets out who does what in the event of an outage or attack, whom they inform and in which order systems are brought back up. Technical emergency tests show whether the plan holds.
Penetration tests & evidence
In a penetration test we attempt, in a controlled manner and by agreement, to break into your systems, and document the result. We also support you technically with questionnaires from cyber insurers and with data protection measures such as encryption and endpoint security. In doing so, we do not provide legal advice and give no guarantee of security – we make sure there is an honest, verifiable technical basis.
Typical use cases
When it pays off.
The insurer sends a questionnaire
Multi-factor authentication, backups, updates, training: we clarify the status, close gaps and document the answers.
A customer demands evidence
A client wants to know how you handle their data. An audit provides the factual basis for this.
There has been an incident
An account was misused or a device was infected. We help with the follow-up and with preventing a recurrence.
Nobody has ever taken a look
The IT has been running for years. A status assessment shows what is really urgent – and what can wait.
Who it is for
Is this right for you?
For SMEs that bear responsibility for customer data, staff data or business-critical systems – in other words, practically all of them.
For associations with member data and for private individuals who want to better protect their accounts and devices, we offer adapted, manageable packages of measures.
- Status assessment – scan and audit show the current state.
- Prioritisation – what achieves the most with little effort?
- Measures – implement technically, train staff.
- Practise – test recovery and the emergency procedure.
- Stay on it – recurring scans and monitoring.
Related services
What often goes with it.
Microsoft 365
Secure sign-in, clean rights and managed devices – the biggest lever in everyday office life.
Hosting & operations
Backups with restore tests and well-maintained servers as the basis of all security.
Infrastructure
Firewall, network segments and VPN set up so that an incident does not affect everything.
Next step
How secure is your IT really?
A status assessment creates clarity. Get in touch for a no-obligation conversation – we will discuss which scope is appropriate for your business.