04 / 06
Digital Hygiene
Take employee behaviour off your attack surface.
What you get
- Awareness training. New-hire onboarding plus annual refreshers, phishing simulations (GoPhish), and industry-specific scenarios.
- Password and identity standardisation. Company-wide password manager, MFA / passkey (FIDO2 / WebAuthn) enforcement, and SSO architecture.
- Device hygiene. MDM setup, disk encryption, automatic update policies, and remote-wipe procedures.
- Policy and process. BYOD policy, acceptable use, and incident reporting — written in plain language.
Our approach
- Baseline audit. Employee survey plus device scan to establish where you are today.
- Training and tooling rollout. Low-friction tools (1Password, Yubikey, etc.) recommended and deployed.
- Simulation campaigns. Quarterly phishing tests; click rates tracked each cycle.
- Continuous measurement. MFA coverage, password-manager adoption, and training completion reported monthly.
Who it's for
Hybrid or fully remote teams; tech companies on the ISO 27001, SOC 2, GDPR, or Cyber Essentials Plus path.
Deliverables
Employee training modules, device hygiene report, quarterly phishing simulation results, and annual improvement metrics.
ONE STEP FURTHER
Let's plan a scoping call for Digital Hygiene.
Fixed-scope engagements with clear pricing. We respond within one business day.
SERVICES