The tools protect. People act. Mynder keeps track of the requirements and documents the controls and how they are followed up.
Security is built layer by layer.
Board
Overall responsibility
Leadership
Daily responsibility
Mynder
Governance and evidence
MSSP
Monitors security
MSP
Runs IT and devices
Infrastructure
Cloud, M365, networks
Employees
Strategy and leadership
Sets direction and takes responsibility.
Defines goals, risk appetite and ambitions
Ensures backing from board and management
Asks for results and documentation
Business strategy
Risk management
Board and management reporting
Compliance and governance
What do we need to keep control of?
Overview of requirements and regulations
Mapping of risk, status and deviations
Actions, responsibility and follow-up
Documentation and reporting
Requirements and frameworks
Risk and actions
Documentation and reports
Prevent and protect
Protects the business in practice.
Endpoint security (PC, mobile, server)
Backup and recovery
Email and identity security
Monitoring, detection and response
Protection of AI use
IT security services
Continuous monitoring and alerting
Stable and secure operations
Keeps the wheels turning, securely and reliably.
Proactive monitoring and maintenance
Updates, patching and vulnerability management
Capacity, performance and availability
Handling incidents and changes
IT operations and monitoring
Patch management
Backup operations and recovery testing
Users and skills
People make the difference.
Awareness and training
Secure behaviour and good routines
Clear roles and responsibilities
A culture of security and compliance
Security training and phishing exercises
Guidance and advice
Routines and policies
Platforms and networks
A secure and modern foundation.
Robust systems and networks
Cloud services and work platforms
Identity and access management
Secure integration and data processing
Microsoft 365
Network and cloud
Identity and access (Entra ID)
The assets we protect
The core of the business.
Classification of data and information
Protection and access control
Lifecycle and deletion
Availability, integrity and confidentiality
Customer and personal data
Business-critical information
Documents, email and collaboration
Data in AI services
What Mynder is, and is not
When an employee falls for phishing
Access to systems and data
Operations and productivity
Customers and reputation
Notification requirements, for example privacy
Business
Management is informed and considers escalation and communication.
Roles, responsibilities and decisions.
Governance
Incident, actions and evidence are linked to the relevant requirements and controls.
That routines exist and are followed, deviations and improvements.
Security
Account is locked, password changed, MFA and logs checked.
Alerts, logs and actions taken.
Operations
A ticket is created, the incident follows procedure, normal operations are restored.
Incident log and timeline.
People
The affected user is informed and receives targeted training.
Completed training and communication.
Technology
Access and configuration are reviewed and tightened.
Configuration changes and technical controls.
Data
Scope and sensitivity are mapped, the need for notification is assessed.
Assessments of scope and risk, any notification.
You deliver the security. Mynder documents it.
Your customers need more than protection. They need to show that requirements are met. Your services sit in the security and operations layers. Mynder is the governance layer above, tying it all together.
Speak the same language as management: from technical measures to requirements and responsibility.
Make your services visible as documented controls.
Follow up many customers in Partner Workspace.