Challenges
Answering a customer's or insurer's security questionnaire
Questionnaires ask about MFA, endpoint detection, backups and patching. Easy to answer when the controls are in place.
The challenge
A larger customer sends a supplier security questionnaire, and your cyber insurance renewal asks much the same: is multi-factor authentication on for every user, do you have endpoint detection and response, are backups tested, are devices patched? With 150 staff, laptops at home and Microsoft 365 close to its default settings, nobody is sure of every answer, and you do not want to tick a box you cannot back up.
What we would do first
-
Find the gaps
An IT wellness assessment reviews your devices, network, access and backups, and reports the security risks in plain language with a plan ranked by risk.
-
Secure every sign-in
Multi-factor authentication for every user, Entra sign-in policies, legacy sign-in methods blocked, and Microsoft 365 sign-ins monitored for account takeover.
-
Protect, patch and back up
Microsoft Defender and Huntress endpoint detection and response on every computer, laptop and server, devices kept up to date, and backups monitored with restores tested.
-
Have the evidence ready
Regular reports of what was detected and done, and Cyber Essentials certification if customers ask for it, with help preparing the evidence.
The services that apply
-
Endpoint and identity protection
Every computer, laptop and server protected against malware and ransomware, with threats watched for and dealt with by our team.
-
Backup and recovery
Every copy of your data backed up and recoverable, wherever it lives, with recovery times agreed around what matters most to you.
-
IT wellness assessment
A clear, independent picture of your IT, what works, what is at risk and what to do next, from a team that looks after IT every day.
-
Cyber Essentials consultancy
Help getting your business through Cyber Essentials, from finding the gaps to putting the controls in place and preparing the evidence.
-
Password management
Strong, unique passwords for every account your team uses, stored safely, shared securely and managed centrally.
-
Complete Managed IT
Your computers, laptops and servers kept secure and up to date, whether they are in your office, with remote workers or in the cloud.
Further reading
-
Guide
Securing Microsoft 365: why Conditional Access is non-negotiable
Microsoft 365 lets people work anywhere, and so can attackers. Conditional Access policies keep the flexibility and cut the risk.
Read the guide →
Questions people ask
What is Cyber Essentials?
A UK government-backed scheme that certifies a business has five basic security controls in place. Many customers and public contracts require it.
Do we have to use Odyssey to fix what the assessment finds?
No. The plan is yours to act on however you choose, with us or with your own team.
Can you set up multi-factor authentication for every user?
Yes. Multi-factor authentication for every user, with Entra sign-in policies, legacy sign-in methods blocked and Microsoft 365 sign-ins monitored for account takeover.
Do you provide endpoint detection and response?
Yes. Microsoft Defender is backed by Huntress managed endpoint detection and response on every computer, laptop and server.
What evidence can we show a customer or insurer?
Regular reports of what was detected and done, and Cyber Essentials certification if customers ask for it, with help preparing the evidence.
Talk to a human about a security questionnaire
Call and we answer within three rings. Or tell us what you need and we will call you back at any time.