Tech watch

Cybersecurity

Active Directory audits, backups, phishing and NIS 2 compliance: our insights to reduce the real risks faced by a small or medium-sized business.

10 articles in this category.

CybersecurityShadow IT: the tools nobody approvedFree accounts, applications installed without asking, generative AI fed with internal data: what shadow IT exposes, and how to deal with it without banning everything.26 July 2026Explore

CybersecurityAI phishing: the scam email no longer has any typosAI has erased the clues that used to give scams away: spelling mistakes, clumsy wording, a suspicious voice. Awareness training becomes the first line of defence again.8 July 2026Explore

CybersecurityActive Directory tiering: separating admin accounts simplyActive Directory tiering limits the damage when privileged credentials are compromised. Here is how to separate admin accounts without an overbuilt architecture.29 June 2026Explore

Cybersecurity3-2-1-1-0 backup: can you actually restore?The 3-2-1-1-0 rule is only worth something if restores are tested. Here is how a small business can check that it can really get going again after an incident.28 June 2026Explore

CybersecurityPasskeys and phishing-resistant MFA in Microsoft 365FIDO2 passkeys strengthen Entra ID authentication against phishing that AI makes more effective every month. Here is how to deploy them gradually.25 June 2026Explore

CybersecurityNIS2 in 2026: a 90-day action plan for small and medium-sized businessesInventory, admin accounts, backups, MFA, logging and suppliers: a pragmatic 90-day plan to prepare for NIS2 without waiting for the last national implementing text.24 June 2026Explore

CybersecurityNIS2 directive: what businesses need to prepare forThe NIS2 directive extends cybersecurity obligations to a large part of the European economy. Scope, the two regimes, 24-hour notification, management liability, and the example of France, where transposition is running late: why waiting for the last decree is a mistake.21 June 2026Explore

CybersecurityChecklist: the 10 key points of a security audit for SMEsPasswords, backups, patching, access rights, incident response: the ten checks we carry out systematically during a security audit for a small or medium-sized business, and how to use them to prioritise.14 June 2026Explore

CybersecurityActive Directory audit: the common risks in SMEsActive Directory centralises authentication across the whole business and remains the number one target of ransomware. An overview of the configuration weaknesses an audit finds most often, and how to prioritise them.20 April 2026Explore

CybersecurityCritical vulnerabilities: why active monitoring mattersLog4Shell remains the textbook example of a critical vulnerability. Four years on, attackers exploit flaws in days while organisations take weeks to patch: inventory, monitoring and prioritisation are what close the gap.15 December 2025Explore

Other topics

Infrastructure and virtualisation Advisory and compliance All articles

A topic to address in your environment?

These analyses come from real situations met in small and medium-sized businesses. If one of them looks like yours, let us talk.

Discuss your project