Maple Open Tech · Services
Cyber Security Strategy
A security posture sized to your organisation: the handful of controls that matter most, in an order you can afford, with evidence you can show.

What’s included in Cyber Security Strategy
The most useful security advice is short and ordered: the few things that matter most for an organisation your size, done properly and in sequence.
- An asset and access review — what you run, and who can reach it
- Backups proven by a real restore, on a schedule
- Identity hardening: multi-factor, least privilege, and joiner-mover-leaver
- An incident plan short enough to follow at 3am
- Evidence for audits and insurers, produced as you go
What this looks like in practice
Posture review
Ranked findings, sized to what you can actually do
Backup restore drill
Proof it works, with the timings written down
Incident runbook
Who calls whom, in what order, at 3am
How it runs
01
We map what exists
Systems, accounts, data and access, until every account has a name and an owner.02
We rank by real-world impact
The first five items usually cover most of the risk, so they come first.03
We fix, and we test the fix
Every backup gets restored and every plan gets walked through, so you know both work.04
We leave you the evidence
What was done, when, and how it is checked — the thing auditors and insurers actually ask for.
Questions people ask
Is this right for a small organisation?
Yes. It is built for exactly that: the few things that matter most, done properly, in an order you can afford.
Do you do penetration testing?
Yes. We scope it, read the results with you, and carry the work through the fixes and the retest.
Will this satisfy our cyber insurer?
Insurers usually look for multi-factor, backups and an incident plan, which is why those are the first three things on the list.
Let’s talk about Cyber Security Strategy
Tell us what you are working on, and a person at Maple Open Tech will come back with how we would approach it.

