Cybersecurity articles and guides

Cybersecurity guides for small and mid-sized businesses in Jordan and the GCC. Most of the companies we work with are not banks or telecoms. They are law firms, contractors, clinics, manufacturers and agencies with 10 to 200 staff, one IT person or none at all, and a Microsoft 365 tenant that was set up years ago and never reviewed. That profile is exactly what attackers look for: real money moving through email, and no one watching the logs.

The articles in this category are written for that reality. They cover the controls that actually stop the attacks we see in this region — business email compromise and invoice fraud, credential phishing against Microsoft 365, ransomware arriving through an unpatched remote-access tool, and data walking out on an ex-employee’s personal laptop. We also cover the compliance questions our clients get asked by their own customers: Jordan’s Personal Data Protection Law, Saudi Arabia’s NCA Essential Cybersecurity Controls, and the UAE Information Assurance Standards.

Consult One runs security assessments, Microsoft 365 hardening, endpoint protection, backup and disaster-recovery design, and awareness training for teams across Amman, Riyadh, Dubai, Doha, Kuwait and Muscat. We explain what each control does, roughly what it costs, and what it takes to run it after the project ends. A first assessment usually takes a week and ends with a prioritised list of what to fix, in what order, and why — not a sales deck.