Services
We assess security architecture and controls, support technical configuration and remediation, and provide technical consulting on data protection and recovery planning.
We review security architecture and controls, and carry out technical audits against agreed security requirements. Risk mapping relates technical findings to their potential business impact and helps prioritise improvements. The assessment provides a summary of findings and recommended actions.
We provide consulting on server and virtualisation platforms, Windows and Linux environments, and cloud security, including CNAPP (Cloud-Native Application Protection Platform) solutions. Technical work includes architecture reviews, configuration hardening, identity and privileged access management, and remediation of technical security gaps.
We offer expertise in NGFW policies and threat prevention, network segmentation, workload microsegmentation, client VPN, ZTNA, endpoint protection and EDR/XDR solutions. Our work includes security control design, configuration and technical assessment.
Sisuka’s ASV expertise is grounded in over three years of hands-on experience configuring and operating a market-leading Autonomous Security Validation platform and using its test results to prioritise remediation and verify fixes. We support clients’ own ASV activities with tool deployment, test planning, interpretation of findings and remediation validation. ASV testing establishes how an attacker can move through the environment and how security controls prevent or detect attacks. The results support remediation prioritisation and CTEM activities.
Under the managed service model, Sisuka takes responsibility for ASV platform configuration and operation, test planning and execution, and analysis and reporting of results.
The service centres on taking findings through to remediation. We report findings, prioritise remediation based on the risks they pose, and agree on implementation, responsibilities and schedules with the client, service providers and other responsible stakeholders. We support remediation and track its progress.
We verify the effectiveness of fixes through retesting and document the results. Once a fix has been verified as effective, the associated Jira ticket can be closed. The service therefore delivers verified remediation and reduced risk of attack alongside the report.
We review backup and recovery arrangements, recovery objectives and dependencies between critical services. We provide technical consulting on data protection and recovery planning, including disaster recovery (DR), ransomware recovery and recovery testing.
We design and deliver cybersecurity training, workshops and talks for professional and community audiences, in person or online. Content and exercises reflect the participants’ roles, experience and environment.
We provide consulting on the secure adoption and use of AI tools in an organisation. We review how data is handled, who is allowed to use your AI tools, and whether the systems hosting them are secure. Our work provides clear reviews of how you plan to use AI, alongside practical recommendations for technical safety guardrails, core security requirements, and employee usage policies.
Next step
Tell us what you need help with. A short description is enough to start the conversation.
