Protect · Data Security
Data Security
Every other control ultimately exists to protect data. Data security is about knowing what you hold, where it lives, and whether it would survive an attack aimed directly at it.
Delivered from our base in Utrecht, available to organisations across the Netherlands.
The problem
Most organisations don't have a clear, current answer to 'where does our sensitive data live and who can access it.' It's spread across databases, file shares, SaaS applications and inboxes, often without consistent classification or access control, which makes it very difficult to protect what you can't fully account for.
Business impact
A ransomware attack that also destroys backups turns a recoverable incident into an existential one. Data exposure, whether through a breach or simple misconfiguration, carries direct regulatory exposure under GDPR, on top of the reputational and operational cost.
From classification through to ransomware-resilient backups.
Encryption & key management
Data protected at rest and in transit, with key management that doesn't become its own single point of failure.
Data loss prevention
Controls that catch sensitive data leaving through the channels it actually leaves through.
Data classification
Knowing what data you hold and how sensitive it is: the prerequisite for protecting it properly.
Database security
Access control, auditing and hardening for the databases holding your most sensitive information.
Backup security & ransomware resilience
Backups that are actually recoverable and isolated from the systems a ransomware attack would compromise.
Privacy engineering
Technical controls that support GDPR obligations, not just a policy document describing them.
How this engagement runs
Assess
Understand the current state, real risk, and what's actually driving the need for this work.
Architect
Design the controls and approach that fit your environment, not a generic template.
Implement
Deploy and integrate the work: configuration, code, or process, whichever the engagement calls for.
Validate
Test that it actually holds up, rather than assuming it does because it's been deployed.
Improve
Feed findings back in as your environment and the threat landscape change.
Who this is for
- Organisations without a current data classification or inventory
- Companies whose backup strategy hasn't been tested against a ransomware scenario
- Businesses handling regulated or sensitive customer data without dedicated DLP controls
What you get
- A data classification and inventory exercise
- DLP controls scoped to your actual data-loss channels
- A backup architecture review against ransomware scenarios
- Database access control and audit configuration
Frequently asked questions
How is data security different from data privacy?
Privacy is about the rules for how personal data can be used and who can access it, largely a GDPR/legal question. Data security is the technical layer that enforces those rules: encryption, access control, DLP. You need both, and they should be designed together.
What does 'ransomware-resilient backups' actually mean?
Backups that an attacker who has already compromised your production environment can't also delete or encrypt, meaning they're isolated (offline, immutable, or on a separate credential set) rather than just another network share reachable from the same compromised account.