Managed cyber security from NETCONFIG: we lock the doors, check the windows and keep an eye on things, so you can get on with business.
Since 1999 we’ve helped businesses across South Africa work with confidence. We protect your people, devices, email and data with layered security, built largely on the Microsoft 365 tools you may already pay for, and we keep you informed in plain language.
NETCONFIG’s managed cyber security service protects South African businesses across six layers: sign-ins, devices, email, network, backups and people. We set up the protection, keep watch, fix what we find and report back in plain language, with POPIA security safeguards in mind. Most of it runs on Microsoft 365, so you get more from tools you already own.
Your team gets on with the work, knowing someone is watching the doors.
Problems are spotted and sorted early, before they turn into a bad Monday.
When a client, insurer or auditor asks how secure you are, you know where you stand.
Most cyber security problems start with something perfectly ordinary. Here’s what we hear most often:
It looked legit. They usually do.
And it’s the same one used for email. And the bank.
Three acronyms, one deadline.
Spoiler: probably not everything.
Along with a few client files.
And the room went very quiet.
None of this means you’ve done something wrong. It just means it’s time for a plan, and that’s where we come in.
Good security works like a well-run office building: locked doors, a guard at reception, cameras, a fire plan and people who know the drill. Here’s how that translates to your IT.
We switch on multi-factor authentication (MFA) and set sensible Conditional Access rules in Microsoft Entra ID, so a stolen password alone can’t get anyone in.
In plain English: your password plus a quick tap on your phone. Like a key and a fingerprint.
Microsoft Defender for Business watches for suspicious behaviour on each device, and Microsoft Intune keeps devices updated, encrypted and managed.
If a laptop goes missing, we can lock it or wipe company data remotely.
Microsoft Defender for Office 365 checks links and attachments, and we set up SPF, DKIM and DMARC so it’s harder for criminals to send email pretending to be you.
Fewer fake invoices reach your inbox, and fewer fakes go out in your name.
We configure and look after business firewalls, secure remote access and keep guest Wi-Fi separate from the systems that matter.
Visitors get Wi-Fi. They don’t get your accounting server.
Backups follow the 3-2-1 approach (three copies, two types of storage, one off-site), and we test restores, because an untested backup is just a hopeful thought.
Read more about backup and data protection.
Short, friendly awareness training and practice phishing emails help your team spot scams before they click.
Explore cybersecurity training.
We monitor security alerts, keep systems updated, track your Microsoft Secure Score and send you a plain-language report, so you always know how things are going without needing a technical dictionary.
Think of it as a school report for your security, minus the surprise at the end of term.
Plain language. No jargon. No panic.
Microsoft 365 Business Premium includes serious security tools. Many businesses pay for them but never switch them on. We set them up properly and keep them tuned.
| Tool | What it does in plain English | In Business Premium? |
|---|---|---|
| Microsoft Defender for Business | Endpoint detection and response (EDR): spots and stops suspicious behaviour on devices | Included |
| Microsoft Defender for Office 365 Plan 1 | Checks email links and attachments for phishing and malware | Included |
| Microsoft Entra ID P1 | Sign-in security, including MFA and Conditional Access | Included |
| Microsoft Intune Plan 1 | Manages and secures laptops and phones | Included |
| Microsoft Purview (selected features) | Helps label and protect sensitive information | Included |
| Microsoft Defender Suite for Business Premium | Adds deeper protection, such as Defender XDR and Entra ID P2 | Paid add-on |
Thinking about Microsoft Copilot? Get the security and permissions right first, so Copilot only surfaces what each person is allowed to see. See our AI and automation services or visit Cloud & Microsoft 365.
We look at sign-ins, devices, email, backups, firewall and your Microsoft Secure Score, and chat to you about how your team actually works.
You get a prioritised list: what to fix first, what can wait and what it costs. No jargon, no scare tactics.
We switch things on in stages and tell your team what to expect, so nobody’s locked out on a Monday morning.
We keep watch, keep things updated and meet with you regularly to review progress.
Section 19 of POPIA requires businesses to take “appropriate, reasonable technical and organisational measures” to protect personal information. Section 22 says that if there are reasonable grounds to believe someone unauthorised has accessed or acquired personal information, you must notify the Information Regulator and the affected people. Since 1 April 2025, notifications to the Regulator go through its eServices portal.
We put the technical measures in place and help gather the evidence you’d need after an incident. Your Information Officer and legal adviser make the legal calls. Learn about managed POPIA compliance.
Insurers commonly ask about MFA, endpoint detection and response, and backups kept out of ransomware’s reach. We help you understand what’s really in place so you can answer the proposal form accurately. Your broker has the final word on cover.
Read our article on cyber insurance in South Africa.
Founded in 1999 and running as a managed services provider since 2004, we’ve seen threats come and go. Our calm, practical approach has stayed.
We explain things simply, answer the “silly” questions (they never are) and never use fear to sell.
Your managed IT support and security sit with the same people, so there’s no finger-pointing between providers.
Most of our security work happens inside Microsoft 365, where your email, files and Teams already live.
Real people who know your setup, supporting businesses throughout South Africa.
Our head office is at 28 Essex Terrace, Westville, Durban, and we provide support throughout South Africa via dedicated technicians.
Where our team is based, and where you’re always welcome to get in touch.
Dedicated technicians look after businesses in every region, so help is never far away.
Most security work happens remotely and quickly. Where a visit helps, we arrange one.
It usually covers six things: protecting sign-ins with multi-factor authentication, protecting devices with endpoint detection and response, filtering email, securing your network and firewall, backing up data so it can be restored, and training your team to spot scams. At NETCONFIG we set these up, monitor them and report back in plain language.
It’s a strong foundation. Business Premium includes Microsoft Defender for Business, Defender for Office 365 Plan 1, Microsoft Entra ID P1, Microsoft Intune Plan 1 and selected Microsoft Purview features. The catch is that many features must be switched on and configured properly. Some businesses also need Microsoft 365 backups, a managed firewall or add-ons such as the Defender Suite.
MFA means signing in with your password plus a second proof, such as an approval on your phone. A stolen password on its own then becomes far less useful to a criminal. It’s one of the simplest, highest-value protections, and cyber insurers commonly ask about it.
Traditional antivirus mostly looks for known bad files. Endpoint detection and response (EDR) watches how a device behaves, spots suspicious activity such as files suddenly being encrypted, and can isolate the device. Microsoft Defender for Business, included in Business Premium, provides EDR for businesses.
Secure Score is a measurement in the Microsoft Defender portal that shows how closely your Microsoft 365 security settings follow Microsoft’s recommendations. A higher score means more recommended protections are in place. We use it to track progress and show you, in plain numbers, what has improved.
If there are reasonable grounds to believe personal information was accessed or acquired by an unauthorised person, Section 22 of POPIA requires the responsible party to notify the Information Regulator and the affected people as soon as reasonably possible. Since 1 April 2025, notifications to the Regulator go through its eServices portal. Speak to your legal adviser about your specific situation.
Proposal forms commonly ask about MFA, endpoint protection or EDR, backups kept offline or separate from your network, patching and staff training. Requirements differ between insurers, so check with your broker. We help you understand what’s actually in place so you can answer accurately.
It depends on the number of people and devices, your Microsoft 365 licences and how much monitoring you need. We’d rather not guess. After a Business Technology Review, we give you a clear, written quote with no surprises.
Yes. Our head office is at 28 Essex Terrace, Westville, Durban, and we provide support throughout South Africa via dedicated technicians. Most security work, from Microsoft 365 settings to monitoring, is done remotely, with on-site visits arranged where needed.
Book a Business Technology Review. We’ll look at your setup, explain what we find in plain language and suggest sensible next steps. No judgement, no pressure, just clear answers.
