BUI supports global security awareness campaign

BUI is proud to participate in Cyber Security Awareness Month as a Champion Organisation for the sixth consecutive year. Founded in 2004, Cyber Security Awareness Month (held each October) is the world’s foremost initiative aimed at promoting cyber security awareness and best practices. The campaign is a collaborative effort among businesses, government agencies, colleges and universities, associations, non-profit organisations, communities and individuals to educate others about online safety.

“Knowledge and vigilance are essential when it comes to cyber security,” says BUI Global CEO Ryan Roseveare. “You need to know what to look out for. You need to know what to do when you see a red flag. And you need to be alert whenever you’re online. Cyber Security Awareness Month plays a key role in educating the public about common cyber risks and encouraging everyone to become more vigilant. BUI is pleased to join the international community in this focused effort to improve cyber security awareness worldwide.”

From smartphones to web-enabled home devices, technology is deeply intertwined with our lives. And while the evolution of technology accelerates, cybercriminals are working just as hard to find ways to compromise technology and disrupt our personal and business activities.

Cyber Security Awareness Month aims to highlight some of the emerging challenges that exist in the world of cyber security today and provide straightforward, actionable guidance which anyone can follow to create a safer, more secure digital world for themselves and their loved ones.

Starting this year, the new theme of Cyber Security Awareness Month is Secure Our World. The main messaging revolves around four cyber security practices:

Creating strong passwords and using a password manager. The strongest passwords are long and unique, with a mixture of character types (lowercase letters, uppercase letters, numbers, and symbols).
Enabling multi-factor authentication whenever possible. Multi-factor authentication, or MFA, adds an extra layer of security to digital accounts by making secondary authentication mandatory.
Recognising and reporting phishing. Public awareness is essential as cybercriminals continue to refine their tactics for phishing scams conducted through emails, text messages, chats, and phone calls.
Keeping software updated. The latest updates and security patches are important to install to ensure that operating systems, internet browsers, and applications are safeguarded.
Cyber Security Awareness Month continues to build momentum and impact with the goal of providing everyone with the information they need to stay safe online. BUI is proud to support this far-reaching online safety awareness and education initiative, which is co-managed by the Cyber Security and Infrastructure Security Agency (CISA) and the National Cyber Security Alliance.
For more information about the 2023 Cyber Security Awareness Month campaign, you can visit the CISA and Stay Safe Online websites. You can also follow BUI on LinkedIn, Facebook and X (formerly Twitter) for helpful tips and resources throughout October, and join the global conversation by including the hashtag #CyberSecurityAwarenessMonth in your own social media posts.

Improve your security posture with an award-winning technology partner.

Cybercriminals are targeting enterprises big and small to try to gain access to sensitive, confidential, or proprietary data and resources. How are you protecting your IT environment?

Stay ahead of threat actors by choosing a comprehensive managed extended detection and response service from BUI. Contact our team to explore Cyber MXDR today.

Industry certifications to help boost your cybersecurity career

Keen to improve your job prospects in the field of cybersecurity? BUI Cloud Security Architect Neil du Plessis highlights the credentials that could give you a competitive advantage.

There’s a high demand for cybersecurity specialists equipped to help organisations defend themselves against cyberattacks. Industry certifications that validate your cybersecurity experience can be a great way to publicise your abilities, increase your earning potential, and boost your career prospects in this field.

Microsoft, the International Information System Security Certification Consortium, Offensive Security, and eLearnSecurity provide some of the most comprehensive cybersecurity certification courses on the market, according to BUI Cloud Security Architect Neil du Plessis.

Microsoft’s cybersecurity training path

Microsoft offers a variety of cybersecurity training options to help you achieve technical certifications that showcase your industry-relevant skills. Du Plessis advises starting with the SC-900 certification to get to grips with the fundamentals of Microsoft’s security, compliance, and identity solutions.

“You’ll gain valuable insights into the relationship between these solutions and how they can be leveraged to ensure end-to-end cybersecurity. After that, you can move on to technology-specific and role-based certifications in security operations, identity and access management, and information protection, in line with what you want to achieve professionally.”

Du Plessis recommends the following order:

SC-900 | Security, Compliance and Identity Fundamentals, which deals with the fundamentals of effective cybersecurity and gives you an overview of Microsoft’s current security, compliance, and identity management tools and technologies.
AZ-500 | Azure Security Engineer (Associate), which covers the skills you need to manage an organisation’s overall security posture; identify and remediate vulnerabilities; perform threat modelling; and implement threat protection.
MS-500 | Microsoft 365 Security Administrator (Associate), which covers the skills required to secure identities and access, implement threat protection, manage information protection, and enforce compliance for Microsoft 365 workloads.
SC-200 | Security Operations Analyst (Associate), which covers threat management, monitoring, and response with Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft 365 Defender, and other Microsoft security technologies.
SC-300 | Identity and Access Administrator (Associate), which prepares you to design, implement, and operate an organisation’s identity and access management systems, and see to the authentication and authorisation of identities for users, devices, and apps.
SC-400 | Information Protection Administrator (Associate), which equips you to evaluate an organisation’s IT processes and operations against the policies and controls in place to ensure information protection and regulatory compliance.
SC-100 | Cybersecurity Architect (Expert), which equips you to design security strategies for data, applications, access management, identity and infrastructure, and collaborate with stakeholders on privacy, governance and compliance.

“Microsoft has outlined its own recommended path for individuals looking to specialise in security, compliance, and identity, but I think you can adapt this learning journey to suit your personal outcomes,” says Du Plessis.

Quick Tip | The Microsoft Security, Compliance, and Identity Training and Certifications Guide contains more information about the SC-900, AZ-500, MS-500, SC-400, SC-300, SC-200, and SC-100 certifications, and Microsoft Learn has an extensive collection of free training materials to aid your studies and exam preparation.

Cybersecurity certifications from (ISC)²

The International Information System Security Certification Consortium – or (ISC)² – offers technology professionals a range of information security certifications. (ISC)² certifications are recognised globally and deal with everything from security administration to operations and management. These are the four that Du Plessis suggests:

Certified in Cybersecurity (CC) is an entry-level certification aimed at graduates, beginners, and novice practitioners in the field. “It’s designed to give you the foundational knowledge required to start a career in cybersecurity,” says Du Plessis. “If you’re new to the industry or perhaps changing your job focus, this could be the first rung on the ladder as you develop your skills.”

Systems Security Certified Practitioner (SSCP) is a credential that proves your ability to implement, monitor, and manage IT systems and infrastructure securely. “It’s a way to demonstrate your holistic understanding of the best practices, accepted policies, and international standards regarding security operations,” says Du Plessis. The SSCP certificate is a popular choice among experienced systems administrators, systems analysts, and systems engineers.

Certified Cloud Security Professional (CCSP) is best suited for information security leaders with experience in cloud security architecture, design, operations and orchestration. “With the CCSP certification behind your name, prospective employers will know that you have advanced capabilities when it comes to protecting critical cloud assets,” says Du Plessis.

Certified Information Systems Security Professional (CISSP) is widely regarded as the globe’s premier cybersecurity certification. “But it doesn’t come easy,” notes Du Plessis. “CISSP certification requires a substantial investment of both time and money. There’s a staggering volume of course information to get through, but the reward is well worth it. Plus, the credential itself can open new doors for you.”

In the United Kingdom, the CISSP certification is comparable to Level 7 of the Regulated Qualifications Framework. And in South Africa, many universities will accept CISSP as recognition of prior learning if you pursue a postgraduate study programme (to achieve an Honours degree, for example).

(ISC)² offers several other certifications, but Du Plessis cautions that they’re geared toward professionals in particular disciplines or industries. “If your focus area is governance and compliance, or risk management, then Certified Authorisation Professional (CAP) may be a good path to explore. But if your responsibilities include protecting sensitive patient data and medical records, then becoming a Healthcare Information Security and Privacy Practitioner (HCISPP) might make more sense.”

Quick Tip | The (ISC)² Cybersecurity Qualification Pathfinder tool can help you decide which certifications match your current and future career goals.

Niche credentials for specialised jobs in cybersecurity

Penetration testing and digital forensic investigation are highly specialised fields that require cybersecurity pros to expand their practical, technical, and analytical capabilities. “For those with the necessary credentials in these niches, there’s certainly no shortage of work,” remarks Du Plessis. “At BUI, our penetration testers are booked months in advance. And worldwide, there’s a growing demand for forensic experts who can help organisations uncover evidence of cybercrime.”

The OSCP (Offensive Security Certified Professional) course presented by Offensive Security is considered far more technical than other ethical-hacking qualifications on the market. “It’s also one of the few cybersecurity certifications that requires students to prove their practical skills in a test environment,” adds Du Plessis. “The combination of hands-on training and real-world simulation is hugely beneficial.”

The certifications offered by eLearnSecurity are also worth looking into – especially if you want to narrow your focus by specialising in penetration testing for web or mobile applications, says Du Plessis. The eLearnSecurity Certified Professional Penetration Tester (eCPPT) credential is recognised on all seven continents, and the Web Application Penetration Tester eXtreme (eWPTX) and Mobile Application Penetration Tester (eMAPT) certifications are respected in IT circles.

The eLearnSecurity Certified Digital Forensics Professional (eCDFP) accreditation is designed for senior technologists with existing cybersecurity knowledge. It focuses on the processes and methodologies used in modern digital forensics investigations.

These cybersecurity certifications are just a starting point. It’s always a good idea to do additional research to see what fits best for you. “Keep an eye on cybersecurity news sites, group forums, and social media, too,” advises Du Plessis. “The security industry is evolving rapidly. If you’re in the loop, then you’ll be able to update your skills accordingly with the right certifications.”

Join our global team of extraordinary technologists.

Bring your talents, skills, and unique perspectives to a collaborative community of technology professionals.

Browse job openings

We’re always excited to grow the BUI community! Take a look at our current vacancies, listed on our career portal.

Practical pointers to help you improve workplace data security

Businesses that take a proactive approach to cybersecurity are better equipped to safeguard sensitive data and spot suspicious activity.

Keeping sensitive data safe and secure is a challenge for businesses of all sizes. Major shifts in the workplace – from in-person to remote and hybrid productivity – forced companies to change, or at least re-assess, their cybersecurity practices and protocols. And far too often, they were not adequately prepared for the evolving cyberthreat landscape.

In fact, according to CyberEdge’s ninth annual Cyberthreat Defence Report, more than 80% of organisations suffered from a successful cyberattack in 2021. With data privacy and data security top of mind, businesses are looking to strengthen their defences against cybercriminals. Here are four simple steps you can take to better protect your workplace data.

1 | Identify the ‘crown jewels’ of your business

Knowing what kind of data cybercriminals want is an essential part of your defence strategy. Therefore, creating an inventory of your so-called crown jewels (the most valuable data and data-related assets within your organisation, including hardware and software information) is important.

In addition, you should have a current (and actively maintained) list of every end-user who has access to your critical business data. Keep accurate records, with device and location details, so that you can carry out the necessary forensic investigations in the event of a data breach.

Further reading: Security must be part of your online business playbook
Further reading: Three simple ways to improve your data privacy

2 | Make sure you’re updating and authenticating – always

Keep your operating systems, software packages and web browsers up to date and ensure that all devices have automatic updates enabled. When your connected environment is well maintained, with patches and updates carried out timeously, then your overall security posture is that much stronger.

In addition, make sure that your staff use multifactor authentication (MFA) when they log in. Simple username-and-password combinations are not enough to keep cybercriminals at bay, and MFA could mean the difference between a successful or an unsuccessful hack.

Further reading: Stop viewing security as a grudge purchase
Further reading: Rethinking cybersecurity for a work-from-home world

3 | Actively monitor your connected environment for suspicious activity

You should monitor your IT environment continuously to detect misconfigurations, vulnerabilities, breach attempts, and cyberattacks in real time. If you have dedicated cybersecurity personnel, they can implement endpoint security technology to help monitor your network. If not, you can bring in SecOps experts to actively identify, investigate, and mitigate cyberthreats 24/7/365.

Moreover, make sure that everyone in your organisation understands the importance of good cyber hygiene and is following the security policies you have in place. When your people know how to spot phishing attempts, for example, then they can respond appropriately.

Further reading: Can you spot these common types of phishing?
Further reading: Three ways to shore up your defences against phishing

4 | Prepare your response plan in advance

No matter how many safeguards you have in place, the unfortunate reality is that cyber incidents still occur. However, responding in a comprehensive manner will reduce the impact on your business and send a positive signal to your customers and employees. Therefore, you should have an incident response plan prepared in advance.

This document should be stored safely and your dedicated response team should be able to access it quickly when the need arises. Make sure your incident response plan includes clearly defined technical, operational, legal, and communication-related steps for your team to follow.

BUI is proud to be a Champion organisation for the 2022 edition of Cybersecurity Awareness Month. This article was originally provided by the National Cybersecurity Alliance and is republished here with permission.

Improve your cybersecurity posture with an expert partner.

Cybercriminals are targeting enterprises big and small to try to gain access to sensitive, confidential, or proprietary data and resources.

How are you protecting your IT environment? Stay ahead of threat actors by choosing a managed detection and response service from BUI.

Three ways to improve your household cybersecurity

Your home network is your gateway to the internet. Are you taking appropriate measures to protect your connected household from cyberattackers?

The COVID-19 pandemic forced people to embrace working from home – a concept they had little or no experience with at the time. Many employees have since returned to the office, but remote work remains a popular choice. According to the 2022 State of Remote Work report by Buffer, 97% of remote workers would like to work remotely, at least some of the time, for the rest of their careers. As remote and hybrid work models continue to evolve, it’s vital for households to be vigilant about cybersecurity.

Most households are linked to the internet in some way. They can be hard-wired to the net or they can leverage wireless technology to connect computers, gaming systems, TVs, tablets, mobile phones and smart home devices to the worldwide web. Having the right cyber protection in place is essential to ensure that everyone in the home can use the internet safely and securely for personal and professional activities. Here are three simple ways to improve your household cybersecurity.

1 | Secure your wireless router

Using a wireless router is a convenient way to allow multiple devices to connect to the internet from different areas of your home. However, unless your router is secure, you risk the possibility of outsiders accessing information on your devices or using your network for nefarious purposes.

It’s important to secure your router from Day 1. Manufacturers assign preset passwords to routers – and these defaults are often weak or easy to guess. If you leave the factory-set password in place, then you effectively leave the door open for cybercriminals to breach your home network. Make sure you change the default router password when you set up the machine itself.

2 | Install security software on household devices

All devices connected to your home network should have security software installed – and updated regularly. Many modern devices have automatic update features, and you should enable them to ensure that your gadgets function optimally and securely at all times.

With the most up to date security software, operating systems and web browsers, your household devices will be better protected against viruses, malware and other cyberthreats.

3 | Back up household data

While steps can be taken to reduce the chance of your household network, devices and user accounts being hacked or compromised, they can never be 100% effective. Households should embrace the practice of backing up data.

You can protect your valuable work, photos and other digital information by making electronic copies of important files and storing them safely. This can be done using cloud software in addition to manual storage devices like portable hard drives and USBs.

By taking simple, proactive steps like these in your own home, you can defend your household members against online fraudsters and scammers.

Improve your cybersecurity posture with an expert partner.

Cybercriminals are targeting enterprises big and small to try to gain access to sensitive, confidential, or proprietary data and resources.

How are you protecting your IT environment? Stay ahead of threat actors by choosing a managed detection and response service from BUI.

Four basic online safety tips to remember

If you look out for phishing scams, protect your passwords, and update your devices regularly, then you can improve your online safety.

Cybersecurity has become one of the biggest topics inside and outside of technology circles over the past two years. From securing personal devices for digital learning and remote work during the COVID-19 pandemic to safeguarding corporate data against cyberattacks, there’s been a seemingly endless news cycle dedicated to concerns around online safety.

It’s easy to feel overwhelmed or even powerless in the face of rapidly increasingly cybercrime, especially when there are fresh headlines about data breaches and phishing scams almost every day. But end-users – the people using technology to communicate, collaborate and connect – have an important role to play as the first line of defence when it comes to thwarting scammers, fraudsters and threat actors.

Unfortunately, many individuals are not aware of the most basic cybersecurity practices for everyday life. During Cybersecurity Awareness Month this October, Champion organisations like BUI are trying to change that – by sharing practical, actionable tips to help everyone #BeCyberSafe. Here are four basic online safety tips that you can implement right now.

1 | Watch out for phishing scams

Phishing (when a cybercriminal poses as a legitimate party in the hope of getting individuals to engage with malicious content or links) remains one of the most popular tactics among cybercriminals. In fact, about 90% of data breaches occur due to phishing, according to Cisco’s 2021 Cybersecurity Threat Trends report.

While phishing has grown more sophisticated, suspicious email characteristics (like poor spelling and grammar, typos, low-quality graphics and fake logos in a message) can be a tell-tale sign that the content is risky. Read our explainer blogs – Phishing: Can you spot these common types? and Three ways to shore up your defences against phishing – to learn more.

And remember… If you think you have spotted a phishing attempt, be sure to report the incident to your internal IT teams and service providers so that they can remediate the situation and prevent others from possibly becoming victims.

2 | Protect your passwords

Having a unique, long and complex password for each of your accounts is one of the simplest ways to boost your online safety. And yet, only 43% of the public say that they “always” or “very often” use strong passwords, according to the National Cybersecurity Alliance’s 2022 Cybersecurity Attitudes and Behaviours Report.

Password cracking is one of the go-to tactics that cybercriminals turn to in order to access sensitive information. And if you are a “password repeater”, once a cybercriminal has hacked one of your accounts, they can easily do the same across all of your accounts. Read our blog – The importance of digital identity management – to find out why it’s vital to make your login credentials rock solid.

3 | Enable multifactor authentication

Multifactor authentication or MFA – which prompts a user to input a second set of verifying information or to sign-in via an authenticator app – is a very effective measure that anyone can employ to reduce the chances of a cybersecurity breach.

According to Microsoft, MFA can block over 99.9% of account compromise attacks. Therefore, it is a must for any individual who is looking to secure their devices and accounts. Remember, multifactor authentication – from one-time PINs to biometric scans – will put an extra barrier between your sensitive data and the cybercriminals who want to access it.

Read our blog – Three simple ways to improve your data privacy – to explore other ways of protecting your personal information.

4 | Turn on automatic updates

Making sure that your devices are up to date should be an essential part of your cybersecurity routine. Don’t ignore software updates and patches! Cybersecurity is an ongoing effort, and updates are important for device maintenance and security.

Instead of trying to remember to check for updates, enable automatic updates whenever you can. This way, you’ll reduce your chances of having older, possibly vulnerable or risky versions of software that could be exploited by cybercriminals.

Improve your cybersecurity posture with an expert partner.

Cybercriminals are targeting enterprises big and small to try to gain access to sensitive, confidential, or proprietary data and resources.

How are you protecting your IT environment? Stay ahead of threat actors by choosing a managed detection and response service from BUI.

BUI named MXDR partner for Microsoft’s new business security services

BUI is proud to announce its selection as a Managed Extended Detection and Response (MXDR) partner for Microsoft’s new business security services, Microsoft Security Experts.

Microsoft Security Experts was unveiled this month and includes three new managed services: Microsoft Defender Experts for Hunting, Microsoft Defender Experts for XDR, and Microsoft Security Services for Enterprise. Two existing services – Microsoft Security Services for Modernization and Microsoft Security Services for Incident Response – are now also part of this portfolio.

As an MXDR partner, BUI will work in conjunction with Microsoft to manage extended detection and response services for some of the largest enterprise customers globally, from threat monitoring to mitigation and investigation.

“We’re excited to continue our security journey with Microsoft,” says BUI Managing Director Ryan Roseveare. “This new collaboration builds on our longstanding relationship, and we look forward to working alongside Microsoft to help customers protect and defend their IT environments from emerging cyberthreats.”

A timely development

In 2021, Microsoft security technology blocked over 9.6 billion malware threats and more than 35 billion phishing emails and malicious messages. “Technology is critical, but it’s the combination of leading technologies, comprehensive threat intelligence, and highly skilled people that makes for a truly effective security posture,” notes Vasu Jakkal, Microsoft Corporate Vice President: Security, Compliance, Identity, and Management.

Roseveare agrees. “The cybersecurity landscape is incredibly complex. You need comprehensive tools and holistic knowledge to navigate it successfully. Here at BUI, we’ve focused on building both: our Cyber Security Operations Centre is a state-of-the-art facility designed to leverage and integrate with Microsoft technology, and our security specialists are world-class technologists with a deep understanding of the challenges that businesses are facing today.”

BUI’s tried-and-tested blend of people, process and technology will be critical going forward, adds Roseveare, given the alarming increase in the number and sophistication of cyberattacks.

A trusted partner

BUI was part of a select group of Microsoft Partner organisations involved in the development of Microsoft Security Experts. As a Microsoft Azure Expert MSP, a managed security service provider, and a member of the Microsoft Intelligent Security Association, BUI is consistently recognised as a strategic partner for cybersecurity innovation. BUI holds nine Microsoft Advanced Specializations – including Cloud Security and Threat Protection – and earned Microsoft South Africa’s Security Partner of the Year Award in 2021, 2020, and 2019.

“We’re serious about security. We always have been,” says Roseveare. “We’ve earned the trust and loyalty of customers around the world because we provide the best possible security solutions and the right advice. As an MXDR partner for the Microsoft Security Experts portfolio, we’ll continue to put our expertise to work for customers – because we’re here to help them safeguard their business resources, from the endpoint to the cloud,” he concludes.

Improve your security posture with an expert partner.

Cybercriminals are targeting businesses large and small to try to gain access to sensitive, confidential, or proprietary data and resources.

What steps have you taken to prevent a breach? Stay ahead of threat actors by choosing a managed detection and response service from BUI.

Are your endpoint security measures tough enough for the times?

More than 80% of enterprises had embarked on a hybrid workplace journey by the middle of 2021. Today, the combination of on-site, remote, and mobile productivity is considered part of the new normal – but it also presents significant challenges for corporate cybersecurity teams.

With employees working from so many different locations, using multiple devices and methods of connectivity, managing and monitoring endpoints is a demanding job. And the task is further complicated by the status quo: as personal and professional lives overlap, the lines between home equipment and business equipment are being blurred.

In a recent survey, 46% of employees admitted using their corporate laptop for “life admin” – including online shopping and social media – and 30% said they had allowed someone else to use their work device.

Alongside these emerging trends in device use and misuse, there is substantial evidence that the cyberthreat landscape has been changed irrevocably – by the COVID-19 pandemic and by rapid digital transformation. As the world grappled with the first wave of coronavirus cases in early 2020, there was a 238% spike in cyberattack volume.

Threat actors took advantage of the sudden shift to home-based and remote productivity – and no industry was spared. Miners, manufacturers, financial institutions, healthcare providers, retail outlets, non-profit organisations, and even schools and universities were targeted. Unsecured endpoints – from smartphones to printers – were often exploited during these cyberattacks.

According to the International Data Corporation, 70% of all successful network breaches begin on endpoint devices. To safeguard your enterprise network, you need to monitor every endpoint. You need to apply controls and restrictions. You need to identify anomalies. And you need to respond to threats as they occur. How does your endpoint security strategy measure up?

Are you managing vulnerabilities?

For comprehensive security, you have to be able to identify, assess, and remediate endpoint vulnerabilities and threats in real time. Loopholes and misconfigurations are weaknesses that cybercriminals will try to exploit.

Are you reducing the attack surface?

To minimise your exposure to cybercrime, you have to reduce your attack surface. With stringent controls for devices, applications, and folders, plus comprehensive defences against network intrusions and malware, you can lessen the risk to your resources.

Have you enabled endpoint detection and response?

When you’re proactive about threat hunting within your IT environment, you can harness the power of machine learning, big data, and advanced analytics to detect suspicious behaviours and malicious activities on endpoints – and remediate cyberthreats when they occur.

Have you automated investigation and remediation?

High volumes of security alerts and notifications can overwhelm corporate cybersecurity teams and delay their response times. Leverage the security tools at your disposal and apply decision-making algorithms to investigate and resolve security issues automatically, and at scale.

Continuous threat intelligence from endpoints is critical to help your security teams provide robust protection across your enterprise environment. With full endpoint visibility, you will be better positioned to eliminate potential penetration points, monitor emerging threats, and improve your overall security posture.

Get advanced security with Microsoft Defender for Endpoint.

Microsoft Defender for Endpoint uses a combination of technologies built into Windows 10 and Microsoft’s cloud service to generate continuous threat intelligence.

Talk to our experts to learn more about Defender for Endpoint’s advanced threat protection, centralised management, and detailed reporting features.

Two awards for BUI as Microsoft celebrates innovation

We’re so proud to announce that we won the Azure Infrastructure Partner of the Year Award and the Security Partner of the Year Award at the 2021 Microsoft South Africa Partner Awards on Tuesday evening (28 September 2021). In addition to these accolades, BUI was named as a finalist for the Modern Work Partner of the Year Award and the Microsoft Consulting Services Partner of the Year Award.

Held annually, the Microsoft SA Partner Awards recognise outstanding accomplishments by Microsoft Partners in a variety of categories related to competencies, cloud technology, and entrepreneurial spirit. This year’s ceremony was an online event, and Microsoft SA Chief Executive Officer Lillian Barnard praised the Microsoft Partner Network for supporting organisations through the social and economic upheavals of the past 12 months.

Microsoft SA Chief Executive Officer Lillian Barnard delivers her opening remarks during the 2021 Microsoft South Africa Partner Awards virtual gala on 28 September 2021.

“It’s been a challenging time for many South Africans and yet we have remained resilient, and worked together to support our customers, our broader community, and each other,” Barnard said in her opening remarks to attendees. “Our impact and achievements in FY2021 have elevated us to a new level of operational discipline and performance excellence,” she added, acknowledging the agility and innovation shown by partners in response to customers’ evolving business needs.

A turning point for security

BUI Managing Director Ryan Roseveare highlighted the importance of holistic protection after receiving the Security Partner of the Year Award for the third time in a row. “This past year has been an absolute turning point for security,” he explained. “The rapid pace of digital transformation and the shift to remote and hybrid productivity put security firmly in focus, and the rising levels of cybercrime made businesses re-evaluate their risk profiles. We’ve certainly seen an increased number of customers looking for new ways to secure their on-prem and cloud resources.”

The security trophy, continued Roseveare, is a testament to the BUI team’s deep expertise. “We take security seriously. It’s in our blood. It’s what we do every day. And we’re always improving our skills, expanding our capabilities, and exploring next-generation tools to provide superior service and support to our customers. Microsoft’s security stack is very powerful, and we’re able to leverage end-to-end solutions to help organisations protect and defend their critical data and assets.”

A time for cloud-powered modernisation

Master of Ceremonies Aki Anastasiou announced BUI’s victory in the Azure Infrastructure Partner of the Year category with a brief nod to the company’s milestones in 2021. “Well done to BUI for achieving the highest infrastructure-related Azure Consumed Revenue, having a 100-percent cloud-based cyber security operations centre powered by Sentinel, and for celebrating your 21st birthday this year,” Anastasiou said from the virtual stage.

“We’ve built our business around Microsoft Azure,” responded Roseveare. “For more than two decades, we’ve empowered customers to maximise their technological investments. And we’re all in when it comes to the cloud. Azure is a phenomenal platform. It’s constantly growing. And it has the features and functionality to enable connection, collaboration, and innovation at scale,” he added.

As a Microsoft Azure Expert MSP and trusted local partner, BUI completed several major modernisation and migration projects during SA’s coronavirus lockdown period, and continues to build on its reputation for excellence. “It comes down to our people and our processes,” notes Roseveare. “We have a specific culture around skills and skills development, and we invest in our teams to ensure that we remain on the cutting edge. Then, we develop repeatable practices to streamline the digital transformation journey for our customers. The Azure Infrastructure Partner of the Year Award is a prestigious prize, and we’re thrilled with this honour.”

BUI holds advanced specializations in Adoption and Change Management, Cloud Security, Identity and Access Management, Microsoft Windows Virtual Desktop, Teamwork Deployment, and Threat Protection, among others, as well as 16 Microsoft competencies in cybersecurity, productivity, and cloud solutions. “We’re committed to helping customers reap the full benefits of Azure, in terms of cost savings, performance, security, and agility. And we’re excited to support South African enterprises as they move forward into the new year,” concludes Roseveare.

Celebrate with us!

Join us on Facebook, LinkedIn, and Twitter as we share more updates and pictures from the 2021 Microsoft South Africa Partner Awards.

And sign up for our newsletter, the BUI Bulletin, to stay up to date with company news and industry developments.

Enabling comprehensive protection for a new world of work

We’re excited to add two new advanced specializations to our Microsoft portfolio: Cloud Security and Calling for Microsoft Teams.

The Cloud Security Advanced Specialization is awarded only to Gold Microsoft Partners with deep technical knowledge related to Microsoft’s cloud security products, and a successful track record of implementing comprehensive protection across Microsoft Azure and hybrid cloud environments.

To earn the Calling for Microsoft Teams Advanced Specialization, Partners must have extensive experience deploying and managing voice solutions in Microsoft 365, and must be able to integrate modern telephony for customers who require end-to-end communication.

‘Build secure and deploy secure’

As enterprises accelerate their digital transformation initiatives to enable remote and hybrid work, holistic security should be a key consideration, says Managing Director Ryan Roseveare. “Cloud adoption is taking place at a rapid rate, but it’s also taking place at a time when cyberthreats are more serious, more sophisticated, and more frequent than ever,” he notes. “A single mistake or misconfiguration could leave your enterprise vulnerable to attack, and you cannot afford such exposure when hackers are actively targeting businesses, almost constantly, every day.”

“Here at BUI, our approach is ‘build secure and deploy secure’,” continues Roseveare. “We make security part of the process from day one. We work with our customers to understand their unique challenges, and we help them to make the most of Microsoft’s cloud security products so that their digital environments are fully protected. Our expertise, certified by this Cloud Security Advanced Specialization and several others, is what gives our customers the peace of mind to move to the cloud confidently,” he adds.

BUI already holds advanced specializations in Adoption and Change Management, Identity and Access Management, Microsoft Windows Virtual Desktop, Teamwork Deployment, Threat Protection, and Windows Server and SQL Server Migration to Microsoft Azure, as well as 16 Microsoft competencies in cloud productivity, cloud solutions, and cybersecurity, among other solution areas.

Modern solutions for a new world of work

The Calling for Microsoft Teams Advanced Specialization recognises BUI’s capabilities in creating modern voice solutions for a work-from-anywhere world, explains Cloud Centre of Excellence Lead Dhiren Boodhia. “With remote and hybrid work here to stay for many enterprises, there’s a demand for phone-calling technologies that combine unified communications and teamwork,” he says.

Calling in Microsoft Teams has rich functionality to enable people to place and receive calls, transfer calls, and mute or unmute calls. “For end-users, the experience is similar to traditional telephony, but with additional features and the power and scale of the cloud,” continues Boodhia, describing how end-users can use a mobile device or a headset with a laptop or personal computer to place calls to anyone listed in their online address book.

“Calling in Microsoft Teams delivers truly seamless communication, but it must be deployed correctly and securely. The implementation process can be quite complex, especially if it involves Microsoft 365 service deployment, networking changes, and the provisioning or porting of large volumes of telephone numbers. Expert hands are needed, and that’s why our specialists are trusted to help enterprises transition from on-prem phone systems to cloud-based ones – as quickly, efficiently, and cost-effectively as possible,” concludes Boodhia.

Choose a trusted partner to secure your critical resources.

The BUI Cyber SoC is a state-of-the-art facility backed by world-class Microsoft security technology, including Azure Sentinel.

Take a look inside to see our teams in action, or contact us today to explore next-generation security solutions for your enterprise.

BUI earns fourth advanced specialization from Microsoft

We’re proud to announce that we’ve earned the Threat Protection Advanced Specialization from Microsoft in recognition of our proven success in deploying Microsoft Threat Protection, Microsoft Cloud App Security, and Azure Sentinel workloads.

The Threat Protection Advanced Specialization is the fourth such Microsoft accreditation that our company has earned in recent months: BUI also holds advanced specializations in Adoption and Change Management, Windows Virtual Desktop, and Identity and Access Management.

“Security has always been a core focus area for us,” explains Chief Technology Officer Willem Malan. “We strive to give customers the best technology, the most comprehensive guidance, and the most innovative solutions to help them protect their digital estates from evolving threats. The Threat Protection Advanced Specialization is not only an acknowledgement of our premier technical capabilities, but also an indication of our commitment to value-driven service,” he says.

As cyberattacks become more sophisticated and more frequent worldwide, it is imperative for customers to be proactive about security, continues Malan. “To safeguard your business effectively, you need the right expertise and the right resources. BUI specialists are already leveraging next-generation tools for threat detection, investigation, and remediation to provide holistic security services to customers. Beyond that, we are actively expanding our range of Microsoft competencies and pursuing new opportunities to deliver even greater support to businesses that are adapting to remote-work and hybrid-work scenarios in the pandemic era,” he adds.

BUI was the first South African company to achieve Microsoft Azure Expert Managed Services Provider status, and joined the Microsoft Intelligent Security Association (MISA) last year. Top-tier cloud and security skills, as well as collaboration within the wider cybersecurity industry, enable us to better serve our own customers, states Malan.

“Advanced specializations, including our latest one in threat protection, position us to deliver relevant, cutting-edge solutions for complex workplaces. And industry associations, like MISA, provide us with important insights into global security trends. As security advisors and partners, we are making sure that our customers receive unrivalled service and support at every stage of their journey with us,” he says.

Malan describes Azure Sentinel, Microsoft’s cloud-native security information and event management platform, as a crucial part of the modern security stack. “It’s an incredibly powerful tool for continuous, real-time visibility across the IT ecosystem. And it’s a single pane of glass that brings structure and simplicity to security operations. Our customer deployments have been very successful, and the results speak for themselves: reduced risk exposure and faster threat detection and response,” he explains.

SEE HOW WE DO IT | Take a look inside the BUI Cyber SoC

As business organisations search for scalable, cost-effective ways to protect their networks, servers, endpoints, databases, applications, and users from cyberthreats, Malan believes two factors will determine the technology partners they choose: reputation and expertise. “We have a longstanding and award-winning relationship with Microsoft, and customers trust us to deliver the right solutions for their needs. For more than two decades, we’ve helped enterprises to design, deploy, and manage their IT assets securely. We’re excited to continue this tradition as we engage with customers who want to protect and defend their critical systems and data,” he concludes.

Learn how to protect your business from evolving threats.

Browse through our webinar topics and register to secure your spot. It’s quick, easy, and free! Just sign up, and show up.

BUI supports global security awareness campaign