From policy to control
Most IT policies say what should happen. An auditor needs to know who does what, how often, and what evidence it leaves. Rewriting our policies into that shape changed more than their format.
Capabilities · Security
Cyber Security
Zero Trust security for unified protection and provable compliance.
A measurable, auditable Zero Trust architecture spanning identities, devices, data, applications, infrastructure and networks, with unified security operations on Microsoft Defender and Sentinel, and posture management that makes compliance provable.
We engineer software that delivers measurable business outcomes, from two aligned bases in South Africa and Mauritius.
- ISAE 3402 independently assured
- Level 2 B-BBEE
- POPIA & Mauritius DPA aligned
- Offices in Centurion and Ebene
The business case
Security is now a board-level risk, and the talent to manage it is scarce
Breaches are costly and Africa is short of security talent. A Zero Trust architecture and AI-driven operations cut the cost and time of an incident, and make compliance provable.
USD 4.99m
Average cost of a data breach
IBM Cost of a Data Breach Report 2026
80 days
Faster to contain with AI
Lower breach cost and impact (IBM)
Provable
Compliance across identity, data & apps
Measurable, auditable Zero Trust
Where breaches actually start
- Identity as the top attack vector → account takeover
- Unmanaged cloud posture → exposure and configuration drift
- Data unprotected wherever it lives → leakage
- Reactive, siloed security ops → slow detection and response
What it delivers
Zero Trust, end to end
The scenarios we deliver across the security estate.
Identity & Zero Trust
Strong identity, least-privilege and Zero Trust across every access path.
Cloud posture & governance
Continuous posture, exposure management and provable compliance.
Data & application security
Protect data wherever it lives, and build applications securely.
Threat protection & response
Unified security operations with Microsoft Defender XDR and Sentinel.
How we engage & deliver
How a capability engagement runs
Every engagement starts value-first and runs the nVisionIT way, Microsoft-first, on your own cloud.
SPRINT 0
Prove the value
A costed roadmap, a working prototype, the target architecture and a measured value baseline, in 2 to 4 weeks.
MILESTONES
Bill as delivered
We deliver and invoice per milestone for work delivered and reviewed; the budget is refined with you each step.
NO LOCK-IN
No-penalty exit
Stop at any milestone boundary, work done is billed, nothing more.
OWNED
Yours, on your cloud
Deployed into your own cloud tenant or an environment we host for you, in a South African or Mauritian region. You keep control of your data and your deployment.
Outcomes
What changes when Zero Trust is real
Lower breach impact
Faster detection and response, less cost.
Provable compliance
Auditable controls across the whole estate.
Trust to transact
The security posture banking and government require.
Architecture
Entra ID, Defender XDR and Sentinel
Microsoft-first, API-first, Zero Trust and Responsible AI, bilingual (English/French), and deployed in your own cloud tenant or an environment we host, to meet your data-residency requirements.
Microsoft Entra IDDefender XDRMicrosoft SentinelMicrosoft PurviewZero TrustDevSecOpsBilingual (EN/FR)African data residency
Case studies
Work we have done
From our Insights
What we have learned doing this work
Write controls for the estate you have
A control document drafted from good intentions describes a better-run organisation than the real one. The review that matters most is the one done by the people who operate the systems.
Getting ready for TISAX when your customer requires it
For many automotive suppliers a TISAX label is a condition of trade. What a readiness baseline found, and why the gap is usually between a control being designed and a control being switched on.
Offshore economics with onshore alignment. Delivered from Centurion and Ebene, in English and French, with working hours that overlap yours.
Related: Enterprise integration → Case studies → Our Mauritius base →
Make your controls provable
Start with a 45-minute briefing, then a short Sprint 0 that puts a working prototype in your hands before you commit further.