Windows security

Windows Security builds on the security analysis of the Windows OS and Microsoft services. From this, it derives recommendations and an operational procedure for their implementation. It also includes post-implementation support, maintaining and enhancing the implemented standards.

Service description

Windows and other Microsoft platforms are among the most widely used IT products. As such, they face the most cyber-attacks. Microsoft itself takes the utmost care of security during development, implementation and post-implementation. However, the dynamics of the times do not allow individual companies to respond to all recommendations and deploy appropriate changes immediately.

ALEF will tailor your company's basic security configurations (baselines) based not only on licensed standards, but also on proven, freely available standards. It will ensure their implementation, seamless integration and functionality with your applications and systems. It will also take care of their long-term maintenance.

Windows Security is designed for this situation. It combines the know-how of Microsoft's product and platform security experts and years of implementation experience across sectors ranging from manufacturing to banking to military environments.


Who is the service for?

Medium and large organisations running Windows operating systems and Microsoft applications, Microsoft 365 cloud services (Office 365) and applications running on Microsoft Azure.


Main advantages of the service

Protecting key data from leaks

Avoiding financial and reputational losses

Protection of the company's information system

Minimising risks from users

Minimal interference with user comfort

Achieving compliance requirements

How is the implementation done?

  1. Analysis of environments, applications, services, operating systems and end clients
  2. Development of recommendations for optimal safety configurations (baselines)
  3. Comparison of baselines and actual status
  4. Operationalisation of steps to achieve baselines
  5. Validation and debugging of the concept in a specific environment
  6. Implementation
  7. Client-side approval
  8. Support in the operation of platforms
  9. Informing about new opportunities within the baselines
  10. Repeated analyses of environmental deviations from baselines