Program 02 · Shield
Security help for small teams.
Moraph runs network and security operations around the clock for banks, hospitals and agencies. Shield lends that experience to organizations with no security team at all.
What you get
The people who guard banks, looking at your setup.
A security review from the people who run Moraph’s security operations, a plan you can act on, and help preparing for the day something goes wrong.
A security review, in plain words
We look at how your email, devices, accounts and backups are set up, and write down what to fix first, in the order that matters, with instructions your team can follow.
Hardening, done alongside you
Where you need hands rather than advice, Moraph volunteers help switch on multi-factor authentication, separate admin accounts, set up backups that ransomware cannot reach, and remove old access.
Your first hour, written down
An incident plan that fits on a page: who to call, what to disconnect, where the backups are, how to talk to staff and the people you serve if systems are down.
A tabletop exercise
A walk-through of a realistic incident with your leadership, so the first time you use the plan is not the real thing.
A good fit
- You hold personal, health, financial or justice records
- Nobody on staff is responsible for security, or one person is responsible for everything
- You are willing to make the changes the review recommends
Not part of this program
- Emergency incident response. If you are under attack right now, contact your national cyber security agency first (see below)
- Penetration testing of systems you do not own
Under attack right now? Shield is not an emergency service. Disconnect affected devices from the network without switching them off, call your insurer if you have cyber insurance, and report to your national agency:
- United States: CISA
- Canada: Canadian Centre for Cyber Security
- United Kingdom: National Cyber Security Centre
- Australia: Australian Cyber Security Centre
- New Zealand: National Cyber Security Centre
- India: CERT-In
Elsewhere, contact your national computer emergency response team (CERT) or the police. Our first-hour checklist covers the rest.
Apply for Shield.
One short form. A person from the Moraph for Good team reads every application and replies, whether or not we can help.