If you store or rely on information, you are a valid target
An SME's data is typically of low value to scammers, but of great value to the SME.
Try running for a few days without it.
SMEs often lack the how and the why
to develop a valid Cyber defensive stance.
This makes them easy targets.
Ransomware tools are now for sale
on the Internet's Dark Web.
No skills required, just low moral standards.
The person who will pay the most
for your data is most likely you.
If someone took away all of your computer data;
quotes, orders, contacts, tax records, pricelists, brochures, saved passwords, personal stuff etc
how much would you pay to get it back?
Process automation must be
effective, safe, and reliable,
but definitions and laws change.
External forces, not always intentional or predictable, can impact these factors.
Data unreliability and loss can have many causes.
Recovery and Continuity plans protect
both profits and people
prevention is not always possible, recovery must be.
When the unexpected happens, you need to rely on fast, strategic, and effective recovery.
If your automation became untrustworthy,
if the safety of your people or the quality
of your end product was compromised,
do you have a plan to get back on course?
* Not all workflows can be made safe, sometimes change is required.
The impact of data untrustworthiness or unavailability increases with staff numbers,
so too does its likelihood of occurring.
Undertrained staff are a common root of data unreliability or unavailability,
Good IT staff aren't typically good teachers.
Staff noncompliance is rarely opposition, its often just staff trying to do their job effectively
if they don't know why, they won't comply.
Instead of you having to oversee your staff,
well-trained staff can oversee your business.
Staff will always seek the easiest way to do their job. Improved processes and better training redefine and minimise resistance for improved surety.
Do your staff know the importance of their diligence?
Celtech, Cyber Security without the Sharp Edges
Services Links
Staff Training
Security Strategy Planning
Compliance Alignment
Self-Assessment Support
Governance and Policy writing
Business Systems Analysis
Benefits
01
MORE COST EFFECTIVE
Not cheap, just more selective use of our time and your money.
02
LESS PUSHBACK
Our solutions seek integration into current processes.
03
MORE INVOLVED
We advocate for ongoing partnerships for better support.
04
MORE SOLUTION FOCUSSED
Lower cost discovery leaves more for the solution.
05
INCREASED STAFF AWARENESS
Better compliance through improved Cyber Savvy.
DIY discovery using our intuitive yet in depth self-assessment tools, on your own, with support, or we will do it with you. [01, 02, 03] We have taken all of our combined experience and created a range of Do-It-Yourself self-assessments. We have found this method reduces your team's feeling of being judged by our consultants, and leads to more accurate, less defensive, or ‘creative’ answers. Especially true when management are in the meetings. It also allows them to not feel pressured by our timeframes, and your budget, as our team only boots up once you have finished the self-assessment. Finally, the process of completing a form allows staff to focus on what each question is asking, not on how to answer and still look capable. They may also consider the benefits an uplift may bring and what else they might benefit from, it makes them feel part of the solution. As part of the solution, they will be more invested in its success.
Extensive, ongoing, staff training to strengthen your weakest link for the same cost as a one-shot session. [01, 02, 05] Our Weekly Training Feed is 50 weekly emails to your staff covering a range of curated topics to help your staff understand what Cyber Security is, why it is necessary, and why it is done the way it is. CS WTF is an informative, entertaining, and memorable 5-minute session emailed to staff weekly or, if you prefer, sent only to one staff member to allow them to use in weekly toolbox meetings. Experience has shown that short regular sessions, a bit of repetition, lessons staff can take home and teach others, and a good dose of 'why' to underlie the DOs and DON'Ts makes Cyber compliance more palatable. Add some humour and a memorable set of characters to deliver it makes the lessons more memorable for staff. Add some delivery options, an email to your team leaders and/or your IT team giving them a more techie heads up on the upcoming lesson and advising any requirements on their part 2 days before the staff email is sent, gets them involved with the staff they support.
We advocate for an ongoing partnership with clients rather than just discover-build-deliver method. [02, 03, 04, 05] As a not-for-profit enterprise we invest our profits into getting better or broader in all we do. In the standard consulting model, the profits made from clients only benefits future clients. Celtech see this not-for-profit model is well suited to our partnership vs periodic radicalisation philosophy as our partners benefit from both our evolution and our support between projects. It also means we are more responsive after solution delivery, making our solutions cheaper and easier to: tweak, to train, to implement, and to justify. Our skill sets include Cyber and Information Security (design, uplifts, testing, assessment, advice, and remote management), Business System Analysis, Compliance (selection, uplifts, and assessments), Governance and Workflow Documentation (uplifts, creation, or establishment of a new system), Change Management, Web Development, and access to a network of other skillsets.
Reduce pushback by greater integration and embedding of solutions into existing workflows and automations. [01, 02, 04, 05] The best defences are negated when staff implement workarounds to task performance they deem too onerous. Analysis of procedure may find simple, unobtrusive ways to strengthen defence with minimal added procedural burden on staff. Many Information Security measures can be imbedded into existing workflows decreasing both resistance to change, and angst at having to learn "new tricks". Some of the savings from Celtech's more cost effective methods can be used to uplift processes or invest in change management should change be required. For example, forcing complex passwords often leads to staff writing them down locally. Against remote attacks written passwords are fine, for internal defences, not so much. MFA/2FA through SMS or Authenticator apps requires staff to have their phones with them to log in, great when personal phones are OK in the workplace, when they are to be kept in lockers, this changes their morning procedures. ID cards, fingerprint scanners, dongles are not just for large corporations. Understanding what is available, costs, level of security, staff uptake and acceptance weighed against the risks your business faces can make for better choices.
We only bill for the skillset required for each phase of your solution. [01, 04] In a typical consultation there is a discovery phase where Consultants ask questions to document your processes and the justifications for them, staff resistance to them, your risk vectors, and your motivation for the current uplift or enquiry. Then there is the build phase where the Analysts will create a plan for the uplift, through analysis of the answers from the discover phase plus additional meeting(s) or email exchanges with the Analysts to clarify what the Consultants failed to ask, and the "now state" can be defined. The "future state" will either be customised based on your specified needs, or the Analyst will recommend one they have used before. Gap Analysis will define the changes required to progress from the "now state" to the "future state", and the Document Writers will write it all up in a formal document. Finally the Consultant will "sell" you on their "build" solution or negotiate variations to it and the Document Writers will rewrite it accordingly. That is the deliver phase. Each phase requires the skill of professionals, some costing more than others. Document Writers earn less than Consultants who earn less than Analysts, so Celtech only charge the appropriate rate for time worked, simple. See Comparing the Traditional way to the Celtech way below. Not cheaper, just a smarter way to save. Not for Profit, but for a purpose.
Celtech, Cyber Security without the Sharp Edges
Tools Links
Information Security Risk Assessment
Staff Cyber awareness assessment
Access to an Awesome Community of
Innovative Individuals
2GB Internet Speed
Unlimited Calls Abroad
Happy Hour Every Friday from 18.00
with Free Alcohol!
Comparing the traditional way to the Celtech way
01
Discovery
02
Analysis
03
Followup
04
Solution
05
Documentation
06
Embedding
We meet your team and classify their knowledge, importance, personalities and resistance to our presence and purpose. We get their schedules and contact details. Then we try to uncover the need and scope of the uplift without making them dislike us.
Typically 2 four hour meetings at $250 / hour
$2000
We compare our meeting notes and recordings with governance materials your team eventually provide and try to decipher the truth from their creative or defensive answers. We then analyse the gap between the now state and the future state.
12 hours at $250 / hour
$3000
We write multiple "please explain" emails and challenge answers that don't fit. We send reminders and CC management when we get impatient. We spend more time trying to re-analyse and interpret the revised information.
Lots of short interactions that add up at $250 / hours
$2000
We search through existing solutions for others in your industry and find one that is tested and proven. If we have none we will look at others with similar methods outside your industry and find the closest match trying to minimise the trauma of change.
16 hours at $250 / hour
$4000
We take an existing solution we know has worked before and rework it to suit your operational model more closely. The focus is getting your key staff and department names correct and, proposing change to your workflows to improve your defences.
16 hours at $250 / hour
$4000
You have the solution, now you just need to train your staff to follow the new method. If we upgraded your Governance documents just remind staff the new way is now THE way.
Unlimited
Free
As your team fill in our online questionnaire, they often discover the same solutions we would have suggested. They are likely to answer more honestly, not creatively or defensively to avoid looking incompetent in a meeting of their peers or superiors.
Unlimited
Free
The questionnaire is the first stage of an advanced non-AI analysis of your threat landscape that identifies and highlights who, why, and how you are most likely to be targeted and any defensive gaps in your defences against them.
12 hours at $250 / hour
$3000
We meet your team, in person or online, and work with them to analyse your current workflows to uncover your vulnerabilities, and propose a conceptual solution based on your threat analysis. We don't judge the now state, just focus on the future state.
Typically 2 four hour meetings at $250 / hour
$2000
We recommend a standard or model and create a preliminary workflow highlighting any changes and allow you to present it to all impacted staff for feed back. We analyse the feedback to seek improvements while remaining compliant. We repeat if warranted.
16 hours at $250 / hour
$4000
We provide uplifts to both Governance and Workflow documents. While a specialist role, our document writers are less qualified than our consultants, so we charge appropriately. A serious benefit of our Not-for-Profit model.
Typically 50% of a project = 32 hours at $150 / hour
$4800
We meet with your staff and go over the changes and the reasons. We meet with managers and team leaders for about 15 mins before the group meeting to know where we need to focus the meeting
6 hours of small group meetings at $200 / hour
$1200