Cyber security for SMBs, so you can run your business with peace of mind
A cyberattack can bring your business to a standstill for days. We provide layered security that prevents attacks, detects them quickly and limits the damage.
View the 11 solutionsIf things do go wrong
From suspicious alert to recovery
This is how we handle an incident together, quickly, calmly and according to plan.
Plan an introduction- Minute 1
Suspicious activity detected
The security system sees that a laptop is behaving abnormally. The device is isolated immediately, so any infection does not spread further.
- Hour 1
We take action, you do not have to search
Our engineers investigate what is going on and contact you. The step-by-step plan makes clear who does what.
- Day 1
Recovering and securing
The device is cleaned or set up again, and where needed we restore data from a clean backup. Passwords are renewed.
- Afterwards
Learning and improving
Together we discuss what happened and how we prevent it from happening again. Where needed, we help with reporting to the right authorities.
Misconceptions
Three misconceptions about cyber security
Misconception: We are too small to be of interest to hackers.
In fact: Many attacks are automated and look for weak spots, such as an account without two-factor authentication. That makes small and medium businesses just as much a target, and they often have less buffer to absorb an incident.
Misconception: A good virus scanner is enough.
In fact: Traditional antivirus mainly recognises known threats. EDR looks at suspicious behaviour, also stops unknown attacks and can isolate an infected device immediately.
Misconception: NIS2 only applies to large companies.
In fact: Even if you do not fall under the Dutch Cybersecurity Act (NIS2) yourself, it can still affect you. Customers and supply chain partners that do fall under it set requirements for their suppliers.
Why cyber security matters so much for SMBs
A cyberattack does not only hit large companies. Small and medium businesses are often affected precisely because the basics are not always in place. The consequences are serious: downtime, loss of data, recovery costs and damage to your reputation. With the right measures, you reduce that risk considerably.
Security is part of everything we do
At NSO, security does not sit alongside our services, it is woven into them. Every environment we manage is built on the same secure foundation. On top of that, we help you mature step by step in information security.
We do what we say
NSO is itself ISO 27001 certified and is assessed every year by DigiTrust. The measures we recommend to customers, we apply to ourselves first. Curious where your organisation stands? Take the free IT check (in Dutch).
NIS2 and the Dutch Cybersecurity Act
Since 15 August 2026, the Dutch Cybersecurity Act has applied, the Dutch implementation of NIS2. Even if you do not fall under it yourself, it often affects you through your customers. Read our article NIS2 and the Dutch Cybersecurity Act for SMBs (in Dutch) to find out what it means for your organisation.
Recognising phishing
Most attacks start with a convincing message. Read our article Recognising phishing: how to protect your organisation (in Dutch) to learn what to look out for, what to do if you have clicked anyway and how to make your team resilient.
What you get
- Modern endpoint security (EDR) on all devices
- Account security with two-factor authentication
- Protection against phishing and malicious email
- Security awareness for your employees
- A step-by-step plan for when things do go wrong
- Periodic reporting on your security
- Advice on NIS2 and the Dutch Cybersecurity Act
- Aligned with the basic measures of the CCV (Dutch Centre for Crime Prevention and Safety)
In depth
How we protect your organisation
Making stolen passwords harmless
A stolen password is one of the most common ways in for attackers. With two-factor authentication and smart access rules, a password alone is no longer enough to get in.
- Two-factor authentication for all accounts
- Blocking suspicious or unsafe sign-ins
- Limited admin rights, with separate admin accounts
- Strong passwords, supported by a password manager
Stopping ransomware and malware
Traditional antivirus only recognises what is already known. Modern endpoint security looks at suspicious behaviour and steps in as soon as something is not right.
- Security that recognises and blocks suspicious behaviour
- Isolating an infected device from the network immediately
- Updates and patches that are applied quickly
- Immutable backups as the last safety net
Recognising and stopping phishing
Phishing emails are becoming more and more convincing. We filter out most of them, and teach your team to recognise the rest.
- Email filtering against phishing and malicious attachments
- Protection against misuse of your domain name (spoofing)
- Short, recurring awareness training
- Realistic phishing exercises, without blame
Knowing what is happening in your environment
You cannot protect what you cannot see. We map your environment and keep an eye on suspicious activity.
- Insight into devices, accounts and sensitive data
- Detection of suspicious sign-ins and behaviour
- Periodic reporting in plain language
- Concrete advice on what to improve first
Prepared for an incident
The question is not if, but when you will face an incident. With a clear plan, everyone knows what to do and you do not lose valuable time.
- A cyber incident plan with an offline contact list
- Agreements on who does what and who you call
- Help with reporting, for example to the Dutch Data Protection Authority
- Practising every year, so the plan really works
Ready for NIS2 and customer questions
With NIS2, in the Netherlands the Dutch Cybersecurity Act, customers and supply chain partners set higher requirements for your digital resilience, even if you do not fall under the law directly yourself.
- Insight into what NIS2 means for your organisation
- Measures based on the Dutch digital security risk classification (RKIDV) of the CCV
- Well-founded answers to security questionnaires
- A partner that is ISO 27001 certified itself
Solutions
What we use for this
Cyber Security brings together solutions from different categories. This is what it includes, explained in plain language.
- Cyber SecurityDevice securityOn every laptop and PC we deploy antivirus against known threats. With Standard we add EDR with behavioural analysis, which recognises suspicious behaviour and intervenes straight away.
- Cyber Security24/7 Security Operations Center (SOC)With Modern Workplace Standard, a team of security specialists keeps watch day and night, investigates suspicious situations and follows them up.
- Cyber SecurityRansomware detectionAn extra layer of security that recognises the first signs of ransomware, so we step in before your files and systems are encrypted.
- Cyber SecurityAnti-phishing for emailOur anti-phishing checks every incoming email for phishing and fraud, and warns your staff with a clear notice in the email itself. With the optional Advanced add-on you extend the protection further.
- Cyber SecurityDMARC monitoringInsight into and control over who sends email on behalf of your email domain, so criminals can no longer send email in your name.
- Cyber SecuritySecurity awareness trainingTraining for your staff and regular phishing simulations, so everyone learns to recognise phishing before things go wrong.
- Cyber SecurityMicrosoft 365 monitoringWe keep an eye on your Microsoft 365 environment for suspicious activity and step in if something is not right, partly fully automatically.
- Cyber SecurityDark web monitoringWith Modern Workplace Standard we search the dark web for leaked data of your organisation, so we can step in before criminals use it.
- Cyber SecurityCompliance DashboardOne overview of the health, security and compliance of your IT environment, with risks, improvement actions and reports for audits and accountability.
- Cyber SecurityBusiness password managerA secure place for all your team's passwords. Strong, unique passwords for every account, safe to share and centrally managed.
- Infrastructure & NetworkSecure working from anywhere (SASE)Secure working from anywhere: your staff are securely connected to the internet and your business applications wherever they are, at home, at the office or on the move, without the hassle of a traditional VPN.
ProjectsSecure sign-in with MFA and single sign-onIntroducing passkeys with a registration campaignInformation classification and labellingSecure Wi-Fi without shared passwords
Frequently asked questions
Questions about Cyber Security
Is your question not listed? Feel free to call us, we are happy to think along with you.
Does my business fall under NIS2?
That depends on your sector and the size of your organisation. Even if you do not fall under NIS2 (the Dutch Cybersecurity Act) directly, it can still affect you through your customers or supply chain partners. We are happy to map out what it means for your organisation.
How do I know how secure my organisation is now?
Start with our free IT check. It is based on the CCV basic measures for risk class 1 and gives you immediate insight per theme. For a thorough picture, we carry out a baseline assessment of your environment.
What should I do if I think we have been hacked?
Contact our service desk immediately. Do not switch off affected devices, but disconnect them from the network. We help you limit the damage, recover and report where needed.