What cybersecurity is
Cybersecurity means protecting the company's computers, networks, programs and data against attacks, theft, unauthorised access and destruction. It includes technical measures, such as passwords, encryption and backups, and also rules for people: who has access to what, and what you do when a strange e-mail arrives.
Companies now keep invoices, contracts, customer data and payroll online. That is why an attack no longer hits just one computer, but the whole business.
Types of cyberattacks
Viruses and malware
Malicious programs that get onto computers and into networks. They copy, change or delete files, slow systems down and can destroy the infrastructure. The malware category includes trojans, spying programs (spyware), forced-advertising programs (adware) and rootkits. They spread through infected files, e-mails and downloads, and can stay hidden for a long time.
Phishing
The attacker pretends to be someone else, a bank, a supplier or ANAF (the Romanian tax authority), to get your passwords or card details. The message comes by e-mail or takes you to a fake site, and it piles on pressure: “your account will be blocked”, “you have an unpaid invoice”. One wrong click can lead to a direct loss of money.
Ransomware
A program that encrypts your files and asks for money to give them back. It can stop the company's work completely. It usually arrives through phishing or through programs that have not been updated.
Hacking
Unauthorised access to systems, through programs with vulnerabilities, weak passwords or missing protection. The attacker can steal customer data, financial information or company secrets, or can break the way the network works.
What happens after an attack
Each of these attacks can compromise the company's data and bring large losses. Besides money, you lose the trust of customers and partners, and that is hard to rebuild. That is why the measures are taken before, not after.
Why cybersecurity matters
- You protect sensitive data. About customers, partners and employees. Losing it costs money and reputation.
- You stay within the law. The GDPR and the rules in fields such as healthcare or finance require data protection.
- You avoid lost days. An attack stops invoicing, deliveries and production.
- You prevent fraud. You block access to bank accounts, payment details and financial documents.
- You keep your customers' trust. A company that protects its data shows it is serious.
How we protect the applications we build
Security starts in the code. In the ERPs, CRMs and applications we build:
- roles and rights for every function: for example, the sales rep does not see salaries, and the warehouse keeper does not see margins;
- two-step login, with an Authenticator-type app or a code sent by e-mail or SMS;
- activity log: every change stays on record, with who made it and when;
- approval before import: data brought in from other programs first appears on a confirmation screen and enters the system only after a person approves it;
- AI kept under control: text from automatically read documents is treated as data, not as instructions, and any write proposed by the AI can require a person's approval;
- backups: the database is backed up automatically, and on some projects a copy is made before every update, with an automatic rollback if something goes wrong;
- protected forms: anti-robot checks and phone confirmation by SMS code;
- GDPR consents kept on each customer.
All of this is described on the Security and audit page. For groups of companies, each company sees only its own data: see Group of companies and multi-location.
Cybersecurity services
Security rests on three things: prevention, detection and response. In practice, we help you with:
- Risk assessment. We analyse the infrastructure and the programs, find the weak points and draw up a plan for what matters most to protect.
- Monitoring and incident response. We watch networks and systems to spot threats quickly. When an incident happens, we step in to limit the damage.
- Firewall and DDoS protection. We set up and maintain firewalls that stop unauthorised access and attacks that try to block your servers with mass traffic.
- Access management. Two-step login and role-based rights, so each person reaches only the data they need.
- Malware and ransomware protection. Programs that detect and block malicious software before it gets into your systems.
- Consulting and training. We teach employees to recognise phishing and manipulation attempts.
Putting cybersecurity in place
Initial assessment
We find out what data and programs the company has, who has access and where the risks are.
Planning
We draw up the plan: technical measures, working rules and team training.
Implementation
We put in place firewalls, intrusion detection, data encryption, two-step login and backups.
Monitoring and maintenance
We watch the systems and update the protection as new attacks appear.
Data protection is part of any good application, not a separate chapter. If you want to know how exposed your company is, write to us. You can also read about the security of applications hosted on servers on the cloud applications page.