Practical writing on NIS2, CyFUN and cybersecurity for SMEs and non-profits. Drawn from what we run into every week, not marketing fluff.
Access only ever grows: every role change, every project and every exception adds rights, and nobody takes them away. An annual access review in five steps, in half a day, and what an IT partner takes off your hands.
November is budget season, and 'what it cost last year plus whatever breaks' is not an IT budget. The six lines you keep separate, how to map your replacement cycle, where to save and where not to, and a three-column template.
What happens on the first day determines how securely someone works for years to come. A checklist in three phases: a week ahead, on day one and after the first month, plus what you deliberately do not do.
Customers receive fake invoices from 'you', while you sent nothing. What spoofing is, how SPF, DKIM and DMARC stop it, why it also affects your own deliverability and how to check in ten minutes whether yours is set up correctly.
Non-profits often think they are not a target. Yet they manage member lists full of personal data and grant money, with a shared password that has lasted for years. Five affordable steps that fit into a few board meetings.
Many SMEs have an IT partner but do not know what has actually been agreed. Five questions about response time, monitoring, reporting, after-hours incidents and the exit, each with the answer you want to hear.
Outside the office the risks are different: a laptop left on the train, public wifi, a child on the same PC. Seven rules for laptop and phone, plus what the manager puts on paper.
Every SME knows the 'remind me later' button. But once a vulnerability is public it is exploited quickly, and it is about far more than Windows alone. What needs updating, why people postpone, and a patch policy in five rules.
A genuine invoice with a changed account number, or an urgent payment order 'from the boss': invoice fraud runs on trust and time pressure. How it works, how to recognise it, and which agreements and settings keep your SME from paying.
Personal Dropbox, ChatGPT with customer data, WhatsApp for work: in a small team shadow IT appears on its own. Nobody reads a thirty-page policy. This is what belongs on one page, and how to write it.
October is European Cybersecurity Month. No reason for a project, but a good hook to actually do four small things: one per week, with an honest time estimate and a simple measurement at the end.
Most SMEs run Microsoft 365 with the default settings from the day it was set up. Eight settings we almost always find still switched off, what they do, which licence you need and how to roll them out without disrupting your team.
Files with strange extensions, a ransom note on the screen and everything grinds to a halt. What you do in that first hour determines how much you lose. A no-nonsense plan: isolate, do not power off, who to call and what to leave alone.
Accounts that stay active for months, shared passwords that never change, data on private devices. A departure is a security risk when there is no list. This is that list: before, on and after the last day, plus what you set up in advance so it runs smoothly.
OneDrive, Google Drive and Dropbox synchronise, they do not back up. We explain the 3-2-1 rule in plain language, list what a 15-person SME needs to back up and give a small test plan to know whether your restore actually works.
Two-step verification is the measure that removes the most risk for the least effort. Which form to choose, in what order to roll it out, which mistakes to avoid and how much time it realistically takes for a team of fifteen.
At SMEs of around fifteen people, phishing is the most common way in. Seven signs that give a suspicious email away, a step-by-step plan for when someone has clicked anyway, and how to make reporting normal in your team.
Wi-Fi problems that keep coming back cost you time and patience every day. We walk through five reasons your Wi-Fi does not work as it should, each with a practical check you can run yourself.
Not every organisation needs the same thing. Secundra works with three formulas: IT Partner, Security Partner and Combined Partner. We go through what each one covers and help you choose based on your situation, risk profile and obligations such as NIS2.
The EU AI Act introduces an obligation around AI literacy. What does article 4 mean in practice for your SME, who is covered, and which first steps should you take now?
NIS2 and CyFUN keep coming up, but what do they actually involve? A clear explanation of the law, who it applies to, and how CyFUN gives your IT security a practical shape.
A free cyber scan sounds like an obligation, but it is above all a clear starting point. We show how the scan works, how much time it takes and what you concretely get: a report, a risk analysis and recommendations to sharpen your IT security.
Most breaches go unnoticed for months. Which signals point to an old or ongoing hack, and which checks can you run yourself today to verify your it security?
Your team is already using AI tools like ChatGPT and Copilot, with or without agreements. A short AI workshop builds AI literacy: what data is allowed, how to spot mistakes, and which use cases actually save time.
Smaller SMEs and non-profits want IT support that actually picks up and an IT partner who knows their business. We explain why owners choose Secundra: wide availability, a fixed contact person, and IT and security in plain language.
When Outlook stops pulling in new mail, work often grinds to a halt. We walk through the most common causes of Outlook problems, each with a concrete fix, so you know where to start yourself.
What actually happens behind the scenes when an IT partner manages your environment? A concrete day in the life of your IT management, from monitoring and patching to helpdesk and advice.
Connecting the printer to wifi fails, and the whole office is waiting. We walk through the practical steps to fix it yourself, and show how an IT partner structurally removes these small annoyances with good IT support.
A slow PC is not automatically infected, and a virus is not always immediately visible. We help you tell the difference, with concrete signals, practical first steps and the point where you are better off calling for help.
Hire your own it specialist or work with an external it partner? An honest comparison on cost, knowledge, availability and continuity for the growing SME.
For many SMEs, the cost of an IT partner is a grey zone. We explain how a fixed monthly fee is built up, what the IT services include, and why predictability pays off more than a cheap hourly rate.
Reused and weak passwords are the biggest risk at most SMEs. Here is how a password manager works, and what to watch for when choosing and rolling one out across your team.
We are a registered service provider for the KMO-portefeuille. But what can you actually do with it, and is it something for a company of your size? We walk through our four advisory modules, with the value of each for both small and micro businesses.
On 24 June our free info evening took place at The Gathering in Boortmeerbeek. A look back at an evening full of concrete tips, good conversations and drinks.
We are now registered for the KMO-portefeuille. For Flemish SMEs that means up to 45% support on our advisory services. Here is what it covers and how to apply.
When does NIS2 actually apply to a Belgian SME? A straightforward read on the criteria, the cascade risk through your clients, and a checklist you can run yourself.
34 controls for the typical Belgian SME. What Basic covers, what it deliberately leaves out, and when Important is actually worth the step up.
Cyber policies are scrutinised harder, questionnaires get longer, and evidence requirements tighter. The three blocks where it usually breaks, and how to prepare.
