Security toolCyber-Fin Sigurnost
A security review of your company before someone else does it for you.
The tool automatically goes through the company’s systems, network and applications looking for weak points. The result is a report that says what is vulnerable, how serious it is and what to do, not just a list of warnings.
Request a checkWhat the report says
Every finding has the system it was found on, a severity level and a recommendation. At the top is a count by level, so the board sees the state of things at once.
2Critical
5High
11Medium
23Low
| Finding | System | Severity | Recommendation |
|---|---|---|---|
| Remote Desktop (RDP) reachable from the internet | Server | Critical | Close the port; access only via VPN. |
| Backups on the same disk as the data | Files | Critical | An offline copy, following the 3-2-1 rule. |
| Outdated web server version with known vulnerabilities | Web application | High | Upgrade to a supported version. |
| The same administrator account on several computers | Access | High | Separate accounts and two-step sign-in. |
| Machine control interface reachable from the office network | Shop floor | Medium | Separate the shop floor network from the office. |
| Printer with the factory password | Network | Low | Change the password and turn off unneeded services. |
The report contains
- A one-page summary for the board
- A count of findings by severity
- A list of findings with the system they were found on
- A technical description of each finding for your IT
- Recommendations and the order of fixes
- A comparison with the previous check, if there was one
What it checks
The company’s infrastructure from network to applications, in one place.
NetworkOpen ports, exposed services and devices visible from outside.
ServersOutdated systems, missing patches and weak settings.
ApplicationsKnown vulnerabilities in the web applications and software you use.
AccessWeak passwords, unused accounts and overly broad permissions.
Industrial systemsMachines and shop floor devices connected to the company network.
BackupsWhether backups exist and are protected from ransomware.
SeverityEach vulnerability ranked by its risk to the business.
ReportA detailed report with findings and recommendations for management and IT.
NIS2 and the Croatian Cybersecurity Act
The Act covers considerably more companies than earlier rules, and customers increasingly ask their suppliers for proof of security measures too. The check shows where you stand today and which measures to take. The check alone is not confirmation of compliance with the Act.
Does the Act apply to your companyHow we work
A check is only useful if fixes follow it.
Agreeing the scopeWe agree which systems, networks and applications to check and when, so the check does not disrupt work.
AnalysisThe tool runs the check, and we review the findings and separate real risks from false alarms.
Report and fixesWe go through the report with you and, as agreed, fix the vulnerabilities or help your IT team.
Frequently asked questions
Does the check disrupt work?
It should not. We agree the scope and timing in advance, and checks that load the network or shop floor machines run outside working hours.
How long does it take?
It depends on the size of the network and the number of applications. We give an estimate once the scope is agreed.
Who sees the results?
You and the people you designate. We hand the report to the board and your IT.
We have external IT support. What then?
The report is written so your IT or external partner can use it directly. If you prefer, we do the fixes.
How often should the check be repeated?
At least once a year and after major changes to your systems. Each new check is compared with the previous one.
Further reading
NIS2 and the Croatian Cybersecurity Act: does it apply to your companyThe Act covers considerably more companies than earlier rules, and indirectly their suppliers too. Here is how to assess whether you are in scope and what is expected of you.Data backup: the 3-2-1 rule and what happens when it failsMost companies have some kind of backup. Few have checked whether anything can actually be restored from it. The 3-2-1 rule is a good start, but it answers only half the question.Why it matters to maintain your networkThe network is the one part of IT that everyone uses all the time and that gets thought about only when it stops. Regular maintenance costs less than one day of downtime.
Let’s check how well your systems are protected.
Describe the situation in a few sentences and we will suggest the next step.
Or write directly to [email protected]. We reply to every inquiry within 24 hours.