Frequently Asked Questions (FAQs)

What is Traditional Antivirus (AV)?

Traditional antivirus software works by using signatures, which are essentially sets of instructions used to identify known threats. If the antivirus doesn't have a signature for a threat, it can't detect or stop it. This makes traditional AV highly dependent on cybersecurity companies constantly providing updated signatures. However, this method is becoming less effective due to the high number of new, unknown threats being created every day.

What is a Zero-Day Threat?

Zero-day threats are cyberattacks that have never been seen before. This doesn’t necessarily mean they are completely new forms of attack; they’re often just variations of existing ones, such as ransomware. Because traditional AV relies on signatures, it is unable to detect or prevent these new types of threats. This is where Endpoint Detection and Response, or EDR, becomes essential.

Endpoint Detection and Response (EDR) – Smarter protection for modern threats

EDR was developed to address the limitations of traditional antivirus. It uses a combination of machine learning and artificial intelligence to analyse and identify suspicious activity on devices. EDR can detect and respond to threats in real time, offering much stronger protection against both known and unknown attacks.

Managed Detection and Response (MDR) and SOC – Security, supercharged

MDR takes EDR a step further by adding a human element through a Security Operations Centre, or SOC. A SOC is a team of cybersecurity experts who monitor device activity around the clock. They look for unusual or malicious behaviour and take action immediately. Because this service operates 24/7/365, you can have confidence that your systems are being constantly watched and protected.

Who are CrowdStrike?

CrowdStrike is widely recognised as a market leader in the cybersecurity space. They provide services to more Fortune 500 companies than any other antivirus provider.

Why Did We Choose CrowdStrike?

Because CrowdStrike works with so many of the world’s largest organisations, they receive an enormous amount of data on attempted attacks. This gives them unmatched insight, allowing them to build highly effective and robust security systems. It’s this deep, real-time threat intelligence that helps keep your devices safer. Simply put, they’re at the front line of cyber defence.

Conditional Access

It’s a tool built into Microsoft Entra that allows IT administrators to control access to applications and data across the Microsoft 365 ecosystem — and beyond.

It works by enforcing policies that define what users can access and under what conditions, such as their location, device type, or sign-in risk.

Examples of common policies include:

• Require multi-factor authentication (MFA) for all users
• Allow access only to certain Microsoft 365 apps
• Block access from outside of approved locations or devices
• Force a password change if risky sign-in behaviour is detected

In essence, it's like working for the government: you’re granted clearance to access sensitive information based on your role, but you must follow specific rules — or conditions — to maintain that access.