Every port, protocol and feature left running has to be patched, monitored and defended. Here is the one question to ask your IT provider, what to switch off on a firewall, and the one exception we keep on purpose.
Cyber Essentials Plus isn’t a longer questionnaire; it’s an auditor checking that your controls are real. Here is what our independent audit tested, how long preparation took, and what a small UK business should expect to spend.
Detection was never where the time went. Geordie Hogarth explains how Si Futures turned vulnerability management from hours of client-by-client navigation into a single fleet-wide board, and why the question to ask your provider is not “do you scan?” but “show me what you decided, and when.”
Fortinet has removed SSL VPN tunnel mode from FortiOS 7.6.3, and an unplanned upgrade can leave remote staff without a connection. Jacques van der Merwe explains why Si Futures is migrating clients to IPsec VPN roughly a year ahead, how running both side by side protects users, and what to check before you upgrade.
Cloud-hosted security vendors upgrade on their own schedule — your configuration doesn’t always survive the transition. A Fortinet EMS incident this week shows what proactive managed security monitoring looks like when it matters most.
AI can write code faster than any developer. The question is whether anyone is checking what it actually produced — and whether it is secure, not just functional. Si Futures ran penetration tests against their own services to find out.
What happens when the 6am standby call sounds completely legitimate — but something still feels wrong? Nicholas Broderick on the verification process that protects MSP engineers and clients when AI voice cloning makes impersonation almost indistinguishable from the real thing.
The most common route into an SME network is not a sophisticated attack — it is a firewall setting that was wrong from the start, or that drifted over time. Nicholas Broderick explains how benchmarking against CIS standards turns assumption into accountability.
A travel consultancy contacted Si Futures because they could not send or receive email — not because of anything they had done wrong, but because their hosting provider had been compromised. This is the DNS security risk most businesses never think about: the infrastructure you rely on sits in someone else’s hands, and their security posture becomes yours by default
