Cybercriminals don't target big corporations — they target unprotected ones. In South Africa, SMEs are the primary target. A single ransomware attack can cost R500,000 to R5 million in downtime and recovery costs.

• No firewall or it hasn't been updated in 6 months
• Your team clicks email links without verifying the sender
• Same passwords used across multiple systems
• No multi-factor authentication on your email
• No idea what devices are connected to your network

• Next-generation firewall installation and 24/7 monitoring
• Enterprise antivirus across every device in your business
• Email security and phishing protection
• Staff awareness training
• Monthly security reports

Ransomware encrypting all your files, a server failure on Monday morning, an employee deleting critical data, or load shedding causing a power surge. Any of these can bring your business to a standstill.

• 3 copies of your data — primary, backup, and additional copy
• 2 different storage types — local and cloud
• 1 copy stored offsite — so physical disaster can't destroy everything
• Automated backups — manual ones get forgotten
• Regular restore testing — a backup you've never tested may not work

South Africa's load shedding adds unique risk. Power surges during stage switches, UPS failures and generator faults are real threats. Your recovery plan needs to account for this local reality.

58% of backups fail to restore successfully on the first attempt. The reasons range from corrupted files to outdated software to backups that stopped running months ago without anyone noticing.

• Modern ransomware actively seeks and encrypts backup files first
• If your backup drive is on the network, it can be encrypted too
• OneDrive and Dropbox are NOT backups — ransomware syncs across them
• You need immutable backups that cannot be altered by ransomware

• Automated daily backups with verification confirmation
• Immutable cloud storage — cannot be altered or deleted
• Versioned backups — go back to any point in time
• Monthly restore tests — we physically confirm the backup works

• Network security — firewall status, open ports, known vulnerabilities
• Backup health — are your backups running and restorable?
• Endpoint protection — antivirus coverage across all devices
• Email security — phishing vulnerability and spam filter effectiveness
• POPIA compliance gaps — what you need to fix and how urgent
• Password and access control — who has access to what

• A written report in plain English — no jargon
• A prioritised list of risks — critical, high, medium and low
• Estimated cost to fix each issue
• A recommended action plan — what to do first, second and third
• No obligation to use About ICT — the report is yours regardless