Author
Luis Miguel Otero Aponte
Pentester · Ciberseguridad720
A useful audit fits in a table: finding, risk, owner, date. If the deliverable cannot be approved in a 30-minute committee, there is too much theatre.
Inventory: laptops, servers, clouds, remote access.
Identity: MFA, administrators, leftover accounts.
Backup: they exist, they are isolated, they were restored this quarter.
Endpoint: agent present, updated, operated.
People: phishing and payment/IBAN-change processes.
Incident: who calls, at what hour, with what account.
Mark critical / important / later. Do not try to close 40 items in a week. A professional cybersecurity audit cuts scope and leaves you that table; the free diagnostic is the first cut.
Gaps usually fall into managed EDR, backups, or NIS2 compliance. Pick one layer, not three disconnected tools. Securiza720 covers continuous operations once the map is clear.
Keep exploring the same topic with more practical reads already available in the blog.
Published Aug 19, 2026 · 8 min read
NIS2 is not a wall plaque. It pushes governance, supply chain, incident reporting, and demonstrable technical measures. An SME starts with inventory, access, and tested backups.
Luis Miguel Otero Aponte
Pentester · Ciberseguridad720
Published Oct 30, 2025 · 4 min read
How SMEs can genuinely test their information security management system (ISO 27001, NIST): realistic phishing simulations, response drills and the human factor.
Luis Miguel Otero Aponte
Pentester · Ciberseguridad720
Published Aug 26, 2025 · 3 min read
What a penetration test is, what it covers and why SMEs should run one at least once a year to find vulnerabilities before attackers do.
Luis Miguel Otero Aponte
Pentester · Ciberseguridad720