Protection that fits everyday practice.
We secure systems, identities, devices and health data – step by step, clearly explained and without fear marketing.
Who it is for
Organisations that process sensitive data and want to build their protection in a traceable way.
- Medical practices and healthcare organisations
- Security-conscious Swiss SMEs
- Businesses with requirements from insurers, associations or clients
- Organisations after a security incident
Typical challenges
Phishing and compromised accounts
Most incidents start with an e-mail or a stolen password.
Unpatched systems
Outdated operating systems and device software expose known attack surfaces.
No overview
Nobody knows exactly which devices, accounts and remote-access paths exist.
Backup without testing
Backups run – whether a restore works has never been checked.
No plan for the worst case
Who reports what to whom when something happens? And who decides?
What we do
Security assessment
Initial evaluation of your environment with prioritised, clearly explained measures.
Endpoint protection
Modern protection on workstations and servers, centrally managed and monitored.
Identity and access security
Multi-factor authentication, role-based permissions and protection of privileged accounts.
Vulnerability and patch management
Regular updates for systems and applications – and, where possible, for medical devices.
Secure configuration
Hardening of workstations, servers, firewall and cloud services according to recognised recommendations.
E-mail security
Filtering, sender authentication (SPF, DKIM, DMARC) and phishing protection.
Backup resilience
Backups attackers cannot delete – with tested restores.
Awareness
Short, practical training for the whole team so phishing is recognised and reported.
Monitoring and incident readiness
Detection of suspicious events, defined reporting paths, emergency contacts and a recovery plan.
How we work together
Consultation and assessment
We understand your operation, your data and your biggest risks.
Action plan
Quick wins and medium-term measures – prioritised by risk and effort.
Implementation in stages
Step by step, without disrupting the practice, with team training.
Operation and review
Ongoing monitoring and regular re-assessments, because risks change.
Tools and guidance
We use established protection solutions and follow recognised recommendations such as the Swiss federal ICT minimum standard – without promising certifications we cannot substantiate.
- Endpoint detection & response
- Multi-factor authentication
- E-mail filtering and sender authentication
- Firewall and network segmentation
- Immutable backups
Operations and responsibility
No fear communication
We prioritise by risk and effort – not by headlines. You decide on an informed basis.
Traceable
Every measure is documented. You see what is protected and what is still open.
During an incident
You have a reachable contact and defined immediate measures. We support containment, analysis and recovery.
Reporting obligations
We help assess whether and to whom an incident must be reported. The decision remains with you and your legal advisers.
What clients say
By name, public and unedited – voices from practices and businesses that work with us.
Working with Liridon Berisha has been a transformative experience for our organisation. His knowledge of IT infrastructure, security and the modernisation of medical technology has significantly raised our operational excellence. Liridon's professionalism, innovative drive and reliability have been outstanding. I recommend Liridon without reservation for any demanding IT challenge.
Christian MaagCOO, GutblickElevate Systems quickly became more than just a service provider – they are a trusted part of our team. Their support, responsiveness and deep understanding of our needs have been decisive for our growth.
Frequently asked questions
We are a small practice – are we even a target?
Yes. Attacks are mostly automated and hit small organisations just the same. Health data is particularly sought after. The good news: a few consistently implemented measures reduce the risk considerably.
Do we need a security operations centre?
In most practices, no. Solid fundamentals matter more: updates, multi-factor authentication, endpoint protection, tested backup and a team that recognises phishing.
How quickly are the first measures in place?
Quick wins such as multi-factor authentication or e-mail protection are introduced rapidly. Larger changes are planned in stages.
Do you offer penetration tests?
Yes, where useful – for example before commissioning new systems or when partners require it. For most practices the assessment comes first.
Know where you stand.
The cybersecurity consultation clarifies your biggest risks and the most sensible next steps.