• How We Secure Your Firm – What We Do, Every Day.

    Security is not a product you buy once. It is an ongoing operational discipline. Innessco manages the security of your firm's environment every day.

    IDENTITY

    Identity & Access Controls

    Innessco protects access to firm systems by controlling who can sign in, where they can sign in from, and how administrator privileges are used.

    • MFA enforced on all user accounts – no exceptions
    • Australia-only sign-in controls reduce exposure to overseas attack attempts
    • Administrator access is separated from day-to-day user accounts
    • We configure Microsoft Entra ID — the identity system behind Microsoft 365 — in line with Microsoft’s recommended security settings
    VULNERABILITY REDUCTION

    Patching

    Innessco coordinates regular patching across Windows, Microsoft 365 Apps, approved business applications and server components.

    Patch windows are scheduled to minimise disruption, while critical security updates are assessed and applied promptly where required. The objective is to reduce exposure to known vulnerabilities without creating unnecessary interruption for staff. 

    ENDPOINTS

    Endpoint Security

    Cloud PCs and managed devices run Microsoft Defender for Business. Innessco layers Huntress on top for additional threat detection and human review.

    • Active threat hunting across endpoints and servers
    • Managed detection and 24/7 response with human security analyst review
    • Ransomware detection and containment
    • Foothold analysis to detect attacker persistence before damage occurs
    DATA PROTECTION

    Email & Data Protection

    Microsoft 365 security controls help protect against phishing, malicious links, unsafe attachments and inappropriate access to firm data.

    Azure server backups are taken daily and retained for 30 days by default, unless a different retention period is agreed. Backups are configured with immutable protection to help reduce the risk of alteration or deletion during an incident. Innessco also conducts an annual recovery test.

    Security that is actively managed

    Security controls only work when they are reviewed, maintained and improved over time. Innessco manages your firm’s Microsoft 365 security settings, endpoint protection, patching, backups and threat alerts as part of the ongoing service — not as a one-off project.

    The result is a more secure, more recoverable environment that supports cyber insurance expectations, client assurance requests and the day-to-day protection of sensitive legal data.