Network security & micro-segmentationA segmented network that limits the blast radius of any breach

Usually not. Modern solutions work at the workload or hypervisor level, independent of hardware. We confirm this during assessment.

We start in monitor-only mode to record every real flow, then enforce gradually with a rollback plan and an observation period per zone.

We work with several leading firewall, NAC and segmentation platforms, and choose based on your environment, your team's skills and existing investments.

Yes, through managed IT services and the NOC, or we hand over to your team with documentation and training.

The main drivers are the number of sites, zones and workloads in scope, how many firewalls, switches and access points are involved, and whether existing equipment can be reused. Undocumented traffic flows and legacy applications add discovery time, as does the number of phases you choose. Operation after deployment is scoped and priced separately.

Current network diagrams, firewall rule exports and an inventory of applications and the servers they run on, with critical systems marked. We also need read access to flow data or logs, contacts in the network and application teams, and your approved change windows.

The Networks Security Management subdomain of the NCA Essential Cybersecurity Controls (ECC) sets minimum requirements that include physical or logical segmentation using firewalls and defence in depth, isolating production from development and test networks, intrusion prevention, wireless security, DNS security and protection against DDoS attacks. We document how the design and rule sets address each control that applies to you; whether you comply is decided at assessment.