Direct naar inhoud
085 013 4500NL

Cybersecurity for businesses

SMEs are the number one target for cybercriminals. Virtual Computing protects your organisation with managed security services — from endpoint protection to incident response. ISO 27001 certified and NIS2 compliant.

Book consultation Request a quote
2000+
Cloud workspaces
6000+
Microsoft 365 accounts
20+
Years of experience
ISO 27001
certified
ISO 9001
certified
Microsoft
Solutions Partner
FD Gazelle
2022 / 2024 / 2025

Cybersecurity for businesses

Why are SMEs a target?

Cybercriminals increasingly target SMEs. Not because they hold the most money, but because their security is often less robust than large enterprises. No dedicated security team, outdated software, weak passwords — these are open doors for hackers. 43% of all cyberattacks target SMEs. The average damage per incident exceeds 50,000 euros, excluding reputational damage and lost productivity. With the NIS2 directive, cybersecurity requirements are also being tightened by law. Virtual Computing offers managed security services specifically tailored to SMEs: professional security without needing to build your own security department.
Why are SMEs a target?

ISO 27001 and ISO 9001

24/7 monitoring and incident response

NIS2-compliant security approach

Security awareness training for employees

Data in our own Dutch data centres

Our managed security services

We offer a comprehensive cybersecurity package that protects your organisation: Endpoint Protection — Microsoft Defender for Endpoint on all devices. Real-time detection and blocking of malware, ransomware and advanced threats. Firewall & Network — Professional firewalls with intrusion detection, network segmentation and secure VPN connections. 24/7 Monitoring — Continuous monitoring of your entire IT environment. Suspicious activities are immediately flagged and assessed by our specialists. Security Awareness Training — Employees are the weakest link. We train your team to recognise phishing, social engineering and other threats. Incident Response — In the event of a security incident, we act immediately: isolate, analyse, recover and report. Also see our cloud security solutions and our complete IT management package.

Endpoint Protection

Microsoft Defender for Endpoint on all devices — real-time protection against malware and ransomware.

24/7 Monitoring

Continuous monitoring of your IT environment with automatic alerting for suspicious activities.

Firewall Management

Professional firewalls with intrusion detection and network segmentation.

Security Awareness

Training for employees to recognise phishing and social engineering.

Incident Response

Immediate action on security incidents: isolate, analyse and recover.

NIS2 Compliant

Our approach and certifications help you comply with the NIS2 directive.

ISO 27001 as a foundation

Cybersecurity starts with a solid framework. Virtual Computing is ISO 27001 certified. This means our processes, systems and staff meet internationally recognised standards for information security. ISO 27001 provides a structured approach to risk management, access control, incident management and continuous improvement. Annual audits by independent parties ensure quality. By working with us, you automatically benefit from this framework. During an audit, supplier assessment or NIS2 inspection, you have the right documentation and certifications readily available.
Customer case — Tandartspraktijk Tilburg
Liedy van Rijswijk runs a dental practice with 12 treatment rooms across 2 locations. Patient data in Exquise and Visiquick, all staff online simultaneously, downtime directly costs revenue. For over 20 years, that entire environment has been running on Virtual Computing's ISO 27001-certified cloud — without an internal IT department.

Read the full customer case →
Read more about the NIS2 directive and how we help you become compliant.

What does a cyberattack really cost an SME?

Cybercrime is not an abstract risk. The numbers are concrete and painful: Average damage per incident: more than €50,000, excluding reputational damage and lost revenue. Average downtime after ransomware: 21 days before an organisation can resume normal operations. 60% of SMEs that experience a serious cyberattack close their doors within 6 months. Average ransomware payment: €120,000 — and in 1 in 3 cases the victim does not get their data (fully) back, even after payment. So the right question is not “can we afford cybersecurity?”, but “can we afford to skip it?”. For €9.50 per user per month, Virtual Computing takes over the complete package — endpoint protection, monitoring, incident response and awareness.

Security checklist: does your SME have this in place?

Run through these 10 points — if you score 7 or below, your organisation is at measurably elevated risk. We do a free security scan to map the gaps.
  • Multi-Factor Authentication (MFA) active on all accounts (M365, email, VPN, admin tools)
  • Microsoft Defender for Endpoint running on all devices — laptops, desktops and servers
  • Email security: DMARC, DKIM and SPF correctly configured for your domain
  • Daily backups on a physically separated location (offsite, immutable storage)
  • Conditional Access policy in Microsoft 365 — no logins from unknown locations
  • Security awareness training for employees, at least 1x per year plus simulated phishing
  • Incident response plan in place, documented and tested
  • Patch management: Windows updates within 72 hours of release, no backlog
  • Network segmentation: no flat network — guests, production and office separated
  • Privileged access management: no local admin rights for regular users
These 10 points don't cover everything, but the absence of any of these measures repeatedly shows up in audits as the root cause of a successful attack. Want to know how your organisation scores? Book a free security intake — 30 minutes, no obligations.

Managed security vs. doing it yourself — what does it really cost?

Hiring an in-house IT employee with security expertise is not a realistic option for most SMEs of 5–50 users. The numbers side-by-side:
Managed security via VCIn-house IT employeeDoing nothing
Cost/mofrom €9.50 per user€4,500–€6,500 (1 FTE)€0 (for now)
24/7 monitoringYes, NL teamNo, office hoursNo
ISO 27001Yes, our frameworkSet up own auditNo
Incident response timeUnder 30 minutesOffice hoursFigure it out yourself
Holidays / illness / turnoverContinuity guaranteedNo backupNo backup
Damage during attackMinimal due to fast responseLimited, if present€50,000+ average
For an organisation of 25 users, that means €237.50/mo via VC versus €5,500/mo for an in-house security employee — and that employee still needs to take holidays.

NIS2 and your SME

For most SMEs of 5–50 employees, NIS2 does not apply directly. The directive targets essential and important organisations in vital sectors (energy, transport, healthcare, drinking water, digital infrastructure, banking, government). Indirectly you can still be affected: if you are a supplier to a hospital, government body or energy company, you also need to demonstrate that your cybersecurity is in order. Our ISO 27001 framework already covers the bulk of those supply-chain requirements. Not sure? Take the free 3-question quickscan (60 seconds, no email required): NIS2 Directive for SMEs — Does it apply to you? You will immediately see which regime applies and what the next step is.

Contact

Arrange it the way you prefer

Prefer a quote with numbers first, a direct conversation, or to get started right away? Pick the route that suits you — no strings attached.

085 013 4500Prefer WhatsApp? Send us a message

We'll call you back

An experienced IT specialist on the line within 1 working day — often the same day.

You'll speak to a specialist, not a salesperson — and we only use your number to call you back.

Customer stories

What our customers

We've trusted Virtual Computing with our IT for over 18 years. From a handful of workstations we've grown to 250+ users spread across Europe. Online Workplace, Microsoft 365, Windows 365 — it scales effortlessly. Fantastic service and excellent knowledge.
M

Matija Jolic

Aushi BV — 250 workspaces across Europe

Good to know

Frequently asked questions

Managed cybersecurity means we take full responsibility for your IT security: endpoint protection, firewalls, monitoring, awareness training and incident response. You don't need to hire your own security team.

SMEs often lack a dedicated security department and have less budget for security. This makes them an easy target. 43% of all cyberattacks target SMEs.

NIS2 is European legislation imposing stricter cybersecurity requirements. It applies to essential and important organisations, and their suppliers. We help you determine if you fall under it and ensure compliance.

We immediately isolate the affected system, analyse the attack, restore from backups and report the incident. Our goal is minimal downtime and data loss.

Through security awareness programmes with simulated phishing attacks, e-learning modules and practical tips. Employees learn to recognise threats before damage is done.

Yes. We are ISO 27001 certified; annual audits by an independent certification body safeguard our information security. We deliberately do not hold a NEN 7510 certificate ourselves: NEN 7510 is a standard for healthcare providers and also covers medical confidentiality, record access and patient consent — matters that sit with the care organisation. Its IT component is ISO 27001, and that is what we are certified against.

Yes, but most clients combine it with our IT management or online workspace. This way, security is fully integrated into your IT environment.

That depends on the number of users and desired services. Contact us for a tailored quote. Call 085 013 4500 or schedule a consultation.

Ready to get started?

Book a free consultation about the best ICT solution for your organisation.

Book consultation Request a quote
or have us call you085 013 4500
Gerelateerde inzichten

Meer weten over dit onderwerp?

By Robin Damen, Founder|Reviewed by Mohammad Moghtader, CTO