IT security that identifies risks, even when everything seems normal.
We protect email, computers and networks. Our security checks help detect threats and anomalies early, so they can be dealt with before they escalate. Extended threat detection in Microsoft 365 is available as an add-on. Everything is explained in plain language.
They happen quietly, in email and in your systems, often for days or weeks before anyone notices.
The checks below are part of the add-on Threat detection in Microsoft 365, which can be added to any package. The checks run automatically and are based on technical logs, such as sign-in events and changed permissions. Their purpose is to identify security risks and operational anomalies – not to measure or track employees’ work. How and when we act on an anomaly is set out in your agreement.
Email account compromiseSomeone signs in to your Microsoft 365 account, reads your email and waits for the right moment.We checkSuspicious sign-ins and unusual locations
Invoice fraudThe fraudster follows a payment conversation and changes the bank details on an invoice. Your customer pays the wrong account.We checkMailbox access and changed mail flows
Hidden forwardingA hidden rule sends all email to an external address and covers its tracks.We checkNew inbox rules and forwarding to external addresses
Account takeoverThe attacker adds their own sign-in methods and creates administrator accounts.We checkChanged MFA, new administrators and new apps
The monthly report
You see what we do. Every month.
The report shows what we’ve checked, what has happened and what we’ve fixed – without jargon and without a page full of red.
01A summary you can take in within 30 seconds
02What we’ve fixed, and why
03What we recommend next
POISE · Monthly report · OctoberIllustrative example
Example with the add-on Threat detection in Microsoft 365.
SummaryEverything looks good. Two items fixed.
Sign-ins to Microsoft 365OK
Email rules and forwardingOK
Antivirus and updatesFixed
Network and connected devicesOK
Administrator accountsFixed
FixedTwo computers were missing the latest update and are now updated. One unused administrator account was disabled.
RecommendationTurn on two-step sign-in for two shared accounts.
Illustrative example. Contains no real customer data. Report content depends on the services included in your agreement. Report language is agreed with each customer.
Packages
The same high security standards. Different levels of responsibility and scope.
Each package builds on the one before. Not sure which fits? We’ll work it out together in the review.
Add-ons: Threat detection in Microsoft 365 · Extended network analysisPrice per user per month, excl. VAT. Licences are invoiced separately as quoted or per the current price list. Setup fee, any minimum charge and contract term as quoted.
CUSTOMER CASE · SECURITY● DETECTED AND RESOLVED
When another tenant’s equipment turned up on the company network
THE CHALLENGE
Equipment belonging to another tenant had been connected to the customer’s internal network without their knowledge. This created a previously unknown risk of unauthorised access to the company’s IT environment.
WHAT WE FOUND
During POISE’s ongoing network and security checks, we identified unfamiliar cameras and computers. We investigated the connections and traced the equipment to another tenant in the building.
THE RESULT
The equipment was disconnected and the affected network connection was closed to prevent the same thing happening again. A hidden security risk was identified and resolved.
Related services: Managed Security · Network and security checks
