06 · CONSULTING & SUPPORT
Cyber security consultancy is a service that assesses an organization’s network and systems against attacks, prioritizes the risks and plans the protective measures. We review your network with you, organize the firewall rules and network structure around your business, and make sure your team can maintain that structure.
WHAT IT DELIVERS
We map the devices, servers and externally exposed services on your network. A device you cannot see cannot be protected; the inventory is where everything starts.
We split the network into segments. A compromised computer or camera cannot reach the accounting server directly.
We clean up the “allow everything” rules that have built up over the years and set a policy that allows only the traffic that is needed.
Most attacks start with an email. We show your staff how to recognize suspicious links and fake login pages.
SCOPE
Topics we cover in a cyber security consultancy engagement:
PROCESS
We listen to how your organization is structured, which systems are critical and what concerns you most.
We review the network topology, firewall rules, device configurations and access rights. We report the findings in order of impact and ease of fixing.
Quick wins first, structural changes next. We state clearly what each step solves and how it affects your business.
We roll out segmentation, the firewall policy and hardening in maintenance windows planned with you, without interrupting your workflow.
We run awareness training for your team and review the rules and configurations again at set intervals.
TECHNICAL NOTES
Security cannot be left to a single device. The firewall protects the outer boundary; segmentation stops spread inside; hardening and patches protect the device itself; backups make recovery possible in the worst case. We assess each of these layers separately.
IP cameras, recorders, access control panels and building automation are often the least updated devices. They need to sit in a separate network segment, have their default passwords changed and never be exposed directly to the internet. These settings should be made when the system is commissioned.
Hardening means turning off unused services on a device, enabling secure settings and narrowing management access. Vendor guides and public checklists such as the CIS Benchmarks guide this work. The same principle applies to user and administrator accounts: everyone should have only the rights their job requires.
Türkiye’s Cyber Security Law No. 7545 and KVKK (Turkish Personal Data Protection Law No. 6698) place technical and administrative security obligations on the organizations within their scope. Technical measures help meet these obligations. (The legal assessment of your obligations is the responsibility of your organization’s legal counsel.)
LAYER
This service sits on layer 6 of the building and is designed together with the other systems on that layer.
Services on the same layer
BRANDS
FAQ
It includes assessing the current state of the network and systems, prioritizing risks and planning protective measures. In our work, network segmentation, firewall policy, hardening, remote access and staff awareness come first. Our Ankara-based team works with organizations across Türkiye.
A firewall is a security device that inspects traffic entering and leaving your network according to defined rules. It blocks unauthorized connections and controls traffic between network segments. Rules that are set up incorrectly, however, can leave the device ineffective.
Basic measures stop most attacks: an up-to-date firewall, regular software updates, multi-factor authentication, backups kept separate from the network and staff awareness. Priorities depend on which data and which systems the business cannot afford to lose.
Network segmentation is splitting one large network into isolated segments. Guest Wi-Fi, cameras, users and servers sit in separate segments, and traffic between them is restricted by firewall rules. That way, a problem in one segment does not spread to the others.
Hardening is reducing the attack surface of a server or network device. Unneeded services are turned off, default passwords are changed, secure protocols are enabled and management access is restricted.
