The student-run simulated company theFIRMA is analyzed from a cyber security perspective, taking into consideration the context and needs of this Turku AMK project. Theoretical concepts such as security standards and frameworks are illustrated. Available options for security improvement within the Microsoft infrastructure used by the university are identified and defined.

The relevant findings are categorized into three pillars of action: physical security, software security and awareness training.

Physical security focuses on hardware solutions for the perimeter of the company premises and on an improvement of access control for employees and guests. The section software security addresses key issues in the prevention of unauthorized access, in the running of unwanted or malicious software and suggests solutions to harden the company network.

The main pillar illustrates awareness training for both employees and administration. The aim is to create a persistent focus on cyber security and data protection within the company projects, shifting to a mentality of security by design and giving administration tools to better protect and supervise company employees and resources.