Skip to content

Cybersecurity for SMEs and practices in Brussels

DeepIT is the IT company that takes care of cybersecurity for SMEs and medical practices in Brussels. In practice: we protect every computer, we secure your accounts and your email, we back up your data outside your premises and check that we can restore it, and we step in as soon as something looks wrong.

No enterprise-grade tooling and no scare tactics: a solid set of protections, followed up over time, with someone clearly responsible for it.

What we put in place

Most attacks on small organisations start the same way: a fake email, a fake invoice, a stolen password. That is not inevitable. Five protections, set up properly and followed up, stop most of it.

Every computer protected and monitored

Microsoft Defender on every computer, managed and monitored by us. It spots a program that behaves abnormally, not just viruses that are already known, and the alert comes to us. Security updates are followed up machine by machine.

Accounts a stolen password cannot open

On your Microsoft 365 accounts, we switch on two-factor authentication: on top of the password, a confirmation code on the phone. We tidy up who has access to what, and we close access on the day someone leaves the team.

That code does not solve everything. What it lets through, and what else to check, is explained in La double authentification suffit-elle sur Microsoft 365 ? (article in French).

Email nobody can impersonate

We check and fix the settings of your domain name (SPF, DKIM and DMARC) that stop a fraudster from sending emails in your name to your patients, clients or suppliers.

Backups outside your premises, tested

Your computers and Microsoft 365 are backed up outside your premises. We follow up every backup: if one fails, we see it. And we regularly check that we can put your data back, because a backup that has never been restored proves nothing.

What a backup can recover when a server no longer starts: we explain it with an example (article in French).

When something looks wrong

A suspicious email, an unusual payment request, a computer acting strangely: you call us. We analyse the machines, isolate what needs isolating, clean up, check every device, and then explain to you what happened.

A real case (anonymised)

An orthodontic practice, June 2026

It all starts with a fake invoice received by email. A few weeks later, the practice notices an attempted fraud. We step in: analysis of the machines, discovery of spyware installed on a server, clean-up, a check of every device, then reinforced monitoring across all our clients to detect the same threat.

The lesson: the attack came in through an email. It was stopped because someone read the traces left on the machines.

Does a team of ten need a cybersecurity company?

Yes, for a solid baseline that is set up properly and followed up over time. Not necessarily for a security operations centre or tools built for large groups. What matters is that someone is clearly responsible for your security, in writing.

The Centre for Cybersecurity Belgium (CCB) describes this baseline in its CyberFundamentals framework. We go through it measure by measure, with who does what, in Une PME de 10 personnes a-t-elle besoin d'une entreprise de cybersécurité ? (article in French).

NIS2, made clear

What is it?

A European cybersecurity law, applied in Belgium since 18 October 2024 (law of 26 April 2024). Healthcare is one of the sectors it covers.

Does it apply to you?

  • Directly, if your organisation, in a covered sector, has at least 50 people, or exceeds both 10 million euros in turnover and 10 million euros in balance sheet total. You had to register with the Centre for Cybersecurity Belgium.
  • Indirectly, in most other cases: hospitals, laboratories and large clients subject to NIS2 ask their partners for a minimum level of security.

What we do with you

We check whether it applies to you, measure where you stand today and fix the weak points in the order that matters. The responsibility stays with the manager: we give you what you need to carry it with peace of mind.

How we start

Security is part of our managed IT plans: what is included is written down in black and white; licences and backup storage are billed separately.

  • A free audit of your computers, your network, your backups and your security
  • A written plan: urgent things first, the rest scheduled with you
  • Set-up, then day-to-day follow-up

And your premises?

Alarms, cameras and access control are the business of DeepSense, our sister brand. Same team, one point of contact.