Establish a clear network boundary
Review internet lines, wired devices and the connections your business needs.
GDMME.COM / EQUIPMENT & MANAGED SECURITYSecurity equipment
Security equipment
Expertly managed
Integrated equipment. Accountable management. Ongoing protection.
Choose security equipment for your workplace, with named responsibility for configuration, updates and follow-up.
YOUR BUSINESS, IN VIEWMANAGEMENT SCOPE
Keep connection rules clear
Review firewall rules, remote access and the connections your business needs.
Review network managementMake protection part of daily work
Track managed computers, agreed endpoint protection and required updates.
See ongoing managementGive every account a clear role
Review access, multi-factor authentication and account changes as staff join or leave.
Explore account protectionGDMME / EQUIPMENT PLANNINGStart with your workplace
Start with your workplace
Choose a suitable equipment plan
You do not need a model number to start. Share your team size, locations and critical connections so we can discuss equipment, licences and management.
Plan access between your workplaces
Outline branch connections, remote access and who should reach each system.
Assess active–standby deployment
Identify services that need continuity, then confirm compatibility and failover testing.
The agreed configuration and quotation identify the equipment model, available functions and support scope.
PROTECTION / YOUR BUDGET
Protection you can sustain
Discuss a scope that fits your business and budget. Confirm what is included and how it is charged before deciding.
MFS — MANAGE FIREWALL SERVICE
Starting plan
HK$850/ month equivalent · from
Annual paymentHK$ 10,200 · Equipment rental + management
12 months paid annually in one payment. Monthly figures are equivalents only; monthly payment is not available.
1 rented firewall · 1 site · Agreed management
First standard on-site installation included · up to 4 hours
Unlimited remote requests and work hours for the contracted firewall
Within the selected plan’s agreed firewall-management scope and service hours
The starting plan is for one rented firewall. HA, additional equipment and compliance support are quoted separately.
Add Huorong Enterprise endpoint protection later as needed; licences are quoted separately.
How we plan around your budget
- 01
Start with your needs
Review the equipment, people and connections that need protection before choosing the scope.
- 02
Plan in stages
Discuss the first priorities and later improvements around your available budget.
- 03
Understand the costs
The proposal identifies equipment, licences, deployment and managed service charges, including one-off and recurring items.
GETTING STARTED
From requirements to deployment
- 01
Describe your environment
People, locations, internet lines and services that matter.
- 02
Confirm configuration and costs
Review equipment, licences, installation and ongoing management.
- 03
Agree deployment and acceptance
Set a change window, test connectivity and document responsibilities.
HEARTBEATActive–standby heartbeat
INTERACTIVE HA CONCEPT
What happens if a device fails?
Try a failure. Compare one device with an active–standby pair.
A · PrimaryActive
B · StandbyReady to take over
InternetUpper path · Device AOffice networkConnected
- 01Primary fails
- 02Detect & switch
- 03Standby takes over
Device A is carrying traffic
Device B is ready, with health checks and synchronisation supported by the configuration.
Concept illustration: connections may be interrupted during takeover. Supported features, recovery time and failback must be tested for the configuration.
GDMME APPLIANCE / DEPLOYMENT
Security equipment and active–standby deployment
- Security equipment
- Resilience planning
- Professional management
Plan for device failure before it happens. Assess whether active–standby deployment fits your critical connections, then agree testing and management responsibilities.
How does active–standby work?
In a supported configuration, one device handles traffic while the standby checks its health and synchronises supported state. If a failure is confirmed, the standby can take over according to the agreed rules.
HA does not replace backups. Takeover may affect connections; compatibility, recovery time and failback need testing for the chosen deployment.
Explore the active–standby demonstrationChassis appearance is a development concept. The starting rental plan includes one firewall; HA and extra equipment are quoted separately. Final model, compatibility and management scope require confirmation.
01 / YOUR INDUSTRYSecurity starts with
Security starts with
the way you work
Choose an industry to explore practical questions for your business.
Equipment cabinetGive the right people access to client files
- Separate access by responsibilityDetails
- Review accounts and access recordsDetails
- Plan backup and recovery of key systemsDetails
A supplier changes bank details. How do you check?
- Independently verify payment changesDetails
- Define finance and warehouse accessDetails
- Review ERP and shipping data backupsDetails
Who can access what across your offices?
- Access for staff and partnersDetails
- Connections between locationsDetails
- Support responsibilities during disruptionDetails
How should maintenance fit production?
- Separate office and production networksDetails
- Authorise supplier accessDetails
- Agree maintenance and recovery windowsDetails
Keep management consistent across locations
- Separate payment and guest networksDetails
- Agree a store incident reporting processDetails
- Schedule updates around trading hoursDetails
Manage data and devices around patient care
- Define access to patient and booking dataDetails
- Agree maintenance windowsDetails
- Prioritise essential data recoveryDetails
Separate teaching, administration and guest access
- Manage staff accounts and student dataDetails
- Separate teaching and guest networksDetails
- Practise checking messages claiming to be school staffDetails
INDUSTRY / PRACTICAL GUIDANCE
Financial and professional services
Give the right people access to client files
Choose a topic to explore
01Client files and separation of duties
- What to watch for
- Broad access to client files or a lack of independent review for important actions can increase the risk of accidental disclosure and unauthorised activity.
- What you can do first
- Start by matching file access to job needs and assigning separate people to carry out and review important actions.
- How GDMME can help
- Within the agreed service scope, GDMME can help review file permissions and the associated user accounts.
02Accounts and access records
- What to watch for
- Shared accounts, old accounts left active and scattered access records can make unusual activity harder to investigate.
- What you can do first
- Start with a list of accounts, their owners and their purposes, then regularly review which permissions are still needed.
- How GDMME can help
- Within the agreed service scope, GDMME can help review account management processes and available records, and recommend improvements.
03Backup and recovery
- What to watch for
- Backups that miss important client data or have never been tested may delay the return to work after an incident.
- What you can do first
- First confirm which important data is backed up, then arrange sample restores and agree on recovery priorities.
- How GDMME can help
- Within the agreed service scope, GDMME can help review backup status, test restores and document recovery steps.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
INDUSTRY / PRACTICAL GUIDANCE
Trade and logistics
A supplier changes bank details. How do you check?
Choose a topic to explore
01Verifying changes to payment details
- What to watch for
- An email impersonating a supplier or sent from a compromised account could lead staff to pay the wrong bank account.
- What you can do first
- Verify requests to change payment details through a previously confirmed contact channel, then have a second colleague review the change.
- How GDMME can help
- Within the agreed service scope, GDMME can help review email and account security and document how staff should report suspicious requests.
02Access for finance, order processing and warehouse teams
- What to watch for
- Shared accounts or excessive permissions across finance, order processing and warehouse teams can increase accidental changes and make responsibility unclear.
- What you can do first
- Start by listing the access each team needs for its work and assigning a reviewer for important data changes.
- How GDMME can help
- Within the agreed service scope, GDMME can help compile account and permission lists and implement changes approved by the business.
03ERP and shipping data backups
- What to watch for
- Without usable backups of ERP, order and shipping data, a system outage may disrupt order processing and deliveries.
- What you can do first
- First identify the data most critical to daily operations, then check that backups cover it and can be restored.
- How GDMME can help
- Within the agreed service scope, GDMME can help review backup coverage and coordinate restore tests with the business and its system provider.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
INDUSTRY / PRACTICAL GUIDANCE
Cross-border businesses
Who can access what across your offices?
Choose a topic to explore
01Access for staff and partners across locations
- What to watch for
- If permissions are not updated when roles or business relationships change, staff and partners may retain access they no longer need.
- What you can do first
- Start by recording each person's access needs, the permission owner and a review date, with removal arranged when employment or a partnership ends.
- How GDMME can help
- Within the agreed service scope, GDMME can help review accounts and permissions and document processes for joining, changing roles and leaving.
02Site connectivity and access
- What to watch for
- Separately managed connection and access methods across locations can increase exposure to data leaks and make connectivity problems harder to diagnose.
- What you can do first
- Start by listing each location's systems, connection methods and responsible contacts, then agree which access methods staff should use.
- How GDMME can help
- Within the agreed service scope, GDMME can help review site connectivity and access arrangements and suggest practical improvements.
03Support responsibilities during an outage
- What to watch for
- Unclear responsibilities between teams and providers can delay troubleshooting and recovery when a system or connection goes down.
- What you can do first
- First agree on incident contacts, escalation steps and each party's responsibilities, along with acceptable temporary working arrangements.
- How GDMME can help
- Within the agreed service scope and support arrangements, GDMME can help document response procedures and coordinate follow-up with designated contacts and providers.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
INDUSTRY / PRACTICAL GUIDANCE
Manufacturing
How should maintenance fit production?
Choose a topic to explore
01Separating office and production networks
- What to watch for
- Without suitable separation between office and production networks, an incident on one device may affect a wider part of the operation.
- What you can do first
- Start with production and equipment owners to identify essential system connections and agree where access between areas should be restricted.
- How GDMME can help
- Within the agreed service scope, GDMME can help review network separation and coordinate proposed improvements with equipment providers.
02Supplier remote maintenance
- What to watch for
- Supplier access left open indefinitely or without a clear owner can increase the risk of unauthorised access and make actions harder to trace.
- What you can do first
- Start by listing remote maintenance accounts and their purposes, then agree how access is requested, approved, timed and closed after use.
- How GDMME can help
- Within the agreed service scope, GDMME can help review remote access and account arrangements and organise available activity records.
03Downtime, updates and recovery windows
- What to watch for
- Updates or recovery work that do not account for production schedules and equipment requirements may extend downtime.
- What you can do first
- First agree on downtime windows, pre-update checks and recovery arrangements with production teams and equipment providers, then set the order of work.
- How GDMME can help
- Within the agreed service scope, GDMME can help coordinate maintenance windows, check relevant backups and document recovery steps.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
INDUSTRY / PRACTICAL GUIDANCE
Retail and multiple locations
Keep management consistent across locations
Choose a topic to explore
01Separating payment systems and guest Wi-Fi
- What to watch for
- When payment devices and guests share a network, unusual activity on a guest device could disrupt checkout and store operations.
- What you can do first
- Start by listing how payment devices, staff and guests use the network, and identify which uses need to be kept separate.
- How GDMME can help
- Within the agreed scope, GDMME can help review network separation needs, prioritise improvements and plan ongoing management.
02Reporting unusual activity in stores
- What to watch for
- Unclear reporting procedures could delay a response to suspicious sign-ins, checkout problems or network outages.
- What you can do first
- Define who staff should contact, what they should record and when an issue needs to be escalated.
- How GDMME can help
- Within the agreed scope, GDMME can help organise reporting procedures and follow up on covered network security issues.
03Scheduling updates around trading hours
- What to watch for
- Poorly timed device updates could interrupt sales, while repeatedly postponing them could increase security risks.
- What you can do first
- List each store’s busy periods, available maintenance windows and the people who need advance notice.
- How GDMME can help
- Within the agreed scope, GDMME can help prioritise updates and schedule maintenance around security needs and store operations.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
INDUSTRY / PRACTICAL GUIDANCE
Healthcare and clinics
Manage data and devices around patient care
Choose a topic to explore
01Access to patient appointment information
- What to watch for
- Access beyond a person’s duties could allow unnecessary viewing or changes to patient contact details and appointment information.
- What you can do first
- Define which appointment details reception, clinical and administrative staff need to view or change.
- How GDMME can help
- Within the agreed scope, GDMME can help review account permissions and identify access that should be narrowed or reviewed regularly.
02Maintenance around consultation hours
- What to watch for
- Maintenance that interrupts systems during consultations could affect registration, access to information and clinic operations.
- What you can do first
- Identify consultation hours that cannot be interrupted, suitable maintenance windows and who to contact if services are affected.
- How GDMME can help
- Within the agreed scope, GDMME can help plan maintenance windows and notifications, and identify work that needs separate arrangements.
03Prioritising recovery of essential information
- What to watch for
- Without an agreed recovery order, unavailable systems or information could delay the return of essential clinic activities.
- What you can do first
- List the information and systems most important to clinic operations, then agree recovery priorities and acceptable downtime.
- How GDMME can help
- Within the agreed scope, GDMME can help review backup and recovery arrangements and plan recovery checks or exercises.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
INDUSTRY / PRACTICAL GUIDANCE
Schools and education
Separate teaching, administration and guest access
Choose a topic to explore
01Staff accounts and student information
- What to watch for
- Shared staff accounts or overly broad permissions could expose student information unnecessarily and make changes harder to trace.
- What you can do first
- List the information teaching and administrative staff need, then review shared accounts and access held by former staff.
- How GDMME can help
- Within the agreed scope, GDMME can help review accounts and permissions and identify shared or outdated access that needs attention.
02Teaching, administrative and guest networks
- What to watch for
- When teaching, administrative and guest devices share a network, unusual activity on one device could affect systems used for other purposes.
- What you can do first
- Separate the needs of classroom teaching, administrative work and guest internet access, and identify resources that need restricted access.
- How GDMME can help
- Within the agreed scope, GDMME can help review network separation needs and prioritise improvements around teaching and administrative operations.
03Messages impersonating the institution
- What to watch for
- Emails or messages impersonating the institution could trick staff, students or parents into sharing account details or making incorrect payments.
- What you can do first
- Publish the institution’s usual contact channels and define how requests for sensitive information or payments should be verified and reported.
- How GDMME can help
- Within the agreed scope, GDMME can help prepare guidance on suspicious messages, reporting procedures and staff reminders.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
INDUSTRY / PRACTICAL GUIDANCE
NGOs and associations
Keep data access clear as roles change
Choose a topic to explore
01Access to member and service user information
- What to watch for
- Access beyond staff or volunteer duties could allow member and service user information to be viewed or shared unnecessarily.
- What you can do first
- Define the information staff and volunteers need for each service and role, and review their access regularly.
- How GDMME can help
- Within the agreed scope, GDMME can help review information access and identify permissions to narrow or arrangements to strengthen.
02Disabling accounts when people leave
- What to watch for
- Accounts left active after staff, volunteers or project workers leave could allow continued access to the organisation’s information and systems.
- What you can do first
- Create a notification checklist for departures and role changes, with clear responsibility for disabling accounts, adjusting access and confirming completion.
- How GDMME can help
- Within the agreed scope, GDMME can help organise account closure procedures and follow up on permission changes for covered accounts.
03Payment verification and connections across centres
- What to watch for
- When centres exchange payment instructions through different channels, impersonation attempts or connection outages could disrupt verification and approval.
- What you can do first
- Require changes to payment details to be verified through a known contact channel, and name a contact for reporting connection problems at each centre.
- How GDMME can help
- Within the agreed scope, GDMME can help review connection risks across centres, organise incident reporting and provide guidance on recognising fraudulent payment messages.
Planning scenarios. Actual work and service hours are confirmed in the engagement scope.
Managed Cybersecurity
Managed cybersecurity for Hong Kong businesses of different sizes. We agree what needs protecting, who is responsible and how the work will be reviewed.
Network and remote access
Review and management of agreed firewalls, remote access and network segmentation.
Devices and accounts
Management of agreed endpoint protection, access controls and update schedules.
Alert follow-up
Review and escalation of relevant security alerts during contracted coverage hours.
Service reporting
Records of completed work, outstanding risks and priorities, including backup checks where contracted.
What you receive
- Management scope and responsibilities
- Device and key configuration records
- Maintenance and follow-up records
- Review summaries at the agreed frequency
Security Review
A baseline security review helps you understand current controls and prioritise practical improvements across your network, devices, accounts and recovery arrangements.
Environment overview
A record of systems, devices and responsible parties included in the review.
Control checks
Review of agreed access permissions, multi-factor authentication, update status and remote access.
Recovery readiness
Examination of available backup records and recovery arrangements. Restoration testing is scoped separately.
Prioritised findings
Identified gaps, their business relevance and recommended next steps.
What you receive
- Scope and evidence limitations
- Environment and responsibility summary
- Findings and improvement list
- Prioritised recommended actions
Staff security education
Start with three habits your team can practise in daily work.
Check the sender
Read the full sender address and domain. A familiar display name alone does not verify identity.
Verify independently
Confirm unusual payment or access requests using contact details you already know.
Protect verification codes
Do not send passwords or one-time codes to another person. Report unexpected sign-in prompts.
Try a scenario: a supplier asks to change bank details
Pause the change. Call the supplier using previously verified contact details, then follow your internal approval process. Do not use a new number supplied in the suspicious message.
Business enquiry
Your industry is already included. Submit here and keep your reference on this page.
Keep your reference
Quote your reference when following up by email. Your email app opens only when you choose the button.
GDMME / HA DESIGN LAB
GDMME Built to counter cyber threats
Network defence and high-availability planning for more resilient business connectivity
Switch equipment on and off to explore network protection and resilience
- Seven floors & HA failover
- 3F racks & dual power
- Huorong & WebRAY demos
Landscape fullscreen Fits your screen with zoom for detail
Toggle equipment and see protection in action
Concept simulation · Not liveTurn your phone sideways
This simulation uses landscape fullscreen Enable auto-rotate The diagram will fit your screen
3ISP MODEM2ISP SWITCH2GDMME HA2CORE SWITCH6FLOOR SWITCH14G / 5G · 1UAP · 2 AC · 2 UPS · 2 PDU
Click devices to toggle
Active member—
Internet uplink—
Floors on core LAN—
Access floors online—
Hover over the diagram and press Alt + Enter for full screen
App and database HA assume configured failover · Backup does not automatically take over · Recovery points and times are not simulated · Fans and cooling are concepts Environmental monitoring is not connected
UPS A/B feed separate PDUs and dual PSUs · Upstream independence requires site verification
Green Path availableGold StandbyRed Off / unavailablePurple Scan illustrationTeal dashes Central management · Shared LANBlue LAN only Internet downTwo-way pulses are illustrative Crossings are not junctions
Cabling schedule & simulation assumptions
Port names and VLANs are planning examples not deployed settings Verify interfaces modules power and compatibility against the selected equipment
The 3F Huorong control center is a separate management server Teal dashes show logical policy and status traffic over the existing LAN rather than dedicated cables This example retains endpoint protection when the center is unavailable Verify actual version and deployment behavior
| # | From → To | Cable / interface | Plan & verification |
|---|---|---|---|
| 01 | ISP 1 / ISP 3 → ISP Switch A | RJ45 / CAT6 | Separate WAN VLANs 101 / 103 Keep provider broadcast domains isolated |
| 02 | ISP 2 / 4G・5G → ISP Switch B | RJ45 / CAT6 | Separate VLANs 102 / 104 Cellular is a backup path |
| 03 | ISP Switch A ↔ B | 802.1Q TRUNK | Permit planned WAN VLANs only Configure loop prevention |
| 04 | ISP Switch A / B → HA A + HA B | WAN-A / WAN-B | Both HA members connect to both WAN switches through separate interfaces |
| 05 | HA A ↔ HA B | HA1 + HA2 | Two dedicated heartbeat cables are proposed Shown as one grouped route Separate from WAN |
| 06 | HA A + HA B → Core A / B | LAN-A / LAN-B | Use a supported stack MLAG or routed design Do not treat independent switches as a single LACP peer |
| 07 | Core A ↔ Core B | PEER / ISL | Plan peer and keepalive links according to the selected platform Shown grouped |
| 08 | Core A / B → ODF → 1F 2F 4F 5F 6F 7F | FIBER A + B | Two uplinks per floor via fibre patching Match transceivers fibre type and distance |
| 09 | Floor Switch → Patch Panel → AP | CAT6 / PoE | Copper via patch panels and cable managers to APs Verify PoE standard and power budget |
| 10 | Core A / B → AC A + AC B | LAN / AC HA | Both HA controllers connect to both cores Requires compatible HA and configuration sync The 3F AP uses Core A with PoE provision to be verified |
| 11 | UPS A → PDU A / UPS B → PDU B | POWER A + B | Dual PSUs use separate A/B PDUs Either path can supply power Do not directly parallel UPS outputs Verify upstream circuit independence and capacity |
Racks include app A/B database A/B and a separate backup server Service HA assumes compatible failover and replication Backup connectivity does not prove valid backups Verify offline or immutable copies and restore tests Huorong shields illustrate assumed deployment rather than real installation status
How this model works
Department VLANs still need inter-zone access policy Microsegmentation can apply policy per host or workload Implementation needs a supported host firewall agent or network platform VLANs and microsegmentation are not simulated here
- The no-inspection comparison uses generic routers and assumes an exposed database service Reachability does not prove compromise Other firewalls or segmentation may also block access
- Reachability is computed from device switches and power Green means an available segment not transaction or service security
- Active-passive HA retains the available active member Wired ISPs are preferred Cellular is selected only when no wired path is available Pulse density distinguishes one two or three available ISPs It does not assume single-connection bandwidth aggregation Multi-WAN routing requires actual configuration
- Dual cores and WAN switches assume compatible redundancy and loop prevention The model does not simulate convergence delay bandwidth session persistence split-brain or individual cable faults
- Dual-power room devices can use either PDU Modems 1/3 use PDU A Both controllers use dual power Modem 2 and cellular use PDU B Floor switches use local floor power
- Dual UPS units do not prove independent upstream power Single floor switches the 3F AP uplink and single modems remain failure points Verify AC HA compatibility and AP forwarding mode
Technical references Follow the selected platform No partnership with these vendors is implied ·HA Heartbeat ·VSF / VSX ·Huorong enterprise ·WebRAY RayScan
GDMME / MANAGEMENT INTERFACE PREVIEW
Your network. Under control.
From deployment to daily management, give administrators a clear entry point and agree configuration and access by authorisation.
Interface previewView the management interface preview
Display only · No account details required
FIREWALLNETWORK SECURITY. YOUR WAY.
NETWORK · POLICY · ACCESS
Your network.Under control.
See your network clearly, shape its policies and control access by authorisation.
NETWORK · POLICY · ACCESSAPPLIANCE ACCESS
Sign in
Use your assigned account to continue.
Account assistance: Contact your administrator.This illustrates the sign-in design without connecting to a device or collecting sign-in details. The actual interface and features depend on the device version and deployment.
Discuss equipment and management →02 / SERVICES
Three ways to start
Start with a review, ongoing management or a support enquiry.
01
ONGOING SECURITY MANAGEMENTManaged Cybersecurity
For businesses that need ongoing security management, a review of current IT support, or clearer ownership of security work.
Explore managed security02
UNDERSTAND YOUR CURRENT POSITIONSecurity Review
For businesses planning an IT handover, checking current protection, or starting a structured review of security responsibilities.
See what we review03
WHEN SOMETHING LOOKS WRONGIncident Support
For businesses seeking a practical assessment of support and recovery options following a suspected security incident.
Understand incident support03 / ACCOUNTABILITYKnow what is done
Know what is done
And what comes next
Good equipment needs consistent management. Keepchecks, responsibilities and next actions visible, so you know how security work is progressing.
Explore management and handoverGDMME / IN FOCUS
From understanding risk to managing it.
Choose what matters to your business and explore GDMME.
The right equipment
A stronger boundary
Equipment and network boundaries planned around your business
GDMME.COMExplore security equipment
Ongoing care
Make equipment count
Update checks · Access reviews · Follow-up records
GDMME.COMExplore managed services
Understand risk
Make safer decisions
Start with phishing emails and identity checks
GDMME.COMExplore interactive education
GDMME / PUBLIC TOOLHTTPS protects the connection
Check a certificate and identity cluesHTTPS protects the connection
Business identity still needs checking
In the age of AI-enabled scams, encryption is only part of the picture. Know who you are dealing with.
04 / OPEN SECURITY EDUCATIONOne message
One message
Three warning signs
Your company normally uses harbour.example. Select the three highlighted areas to see what deserves a closer look.
Try the full practice libraryRansomware initial checkView global cyber threat intelligenceFrom: IT Support
Account security check
0 of 3 clues explored
Select a highlighted area to read the explanation.
Different sender domain
The sender’s domain differs from harbour.example. A familiar display name can be copied; verify using a contact you already know.
Time pressure
Genuine messages can also be urgent. Use a known telephone number or independently open the official service to check.
A request for your code
A verification code may authorise sign-in or an action. Do not send it to someone by email.
Explore the clues, then practise with a full scenario.
Continue to full practiceSTART WITH YOUR SITUATION
Discuss your requirementsGive security work a clear owner
Tell us your company size and what you want to improve.