Frequently Asked Questions

GOT QUESTIONS?
WE'VE GOT ANSWERS.

Everything you need to know about working with De4sec โ€” services, pricing, contracts, compliance and how we support businesses across Kenya and Australia.

๐ŸŒ General & About De4sec
Will this disrupt our business operations?
No. All work is done in a controlled, low-impact way. Patching and updates are deployed out of hours. Configurations are staged and tested before rollout. On-site work is scheduled around your team. We treat operational continuity as a requirement, not an afterthought.
What does De4sec Technology do?
De4sec Technology is an IT services company serving businesses in Kenya/East Africa and Australia. In Kenya, we provide end-to-end IT โ€” POS deployment, hardware supply, Microsoft 365, VoIP, helpdesk support, cybersecurity and KDPA compliance. In Australia, we specialise in cybersecurity โ€” Essential Eight compliance, zero-downtime patch management, secure cloud migration and ongoing managed IT support for SMBs.
Where is De4sec based?
We have a presence in Gold Coast, Queensland, Australia and Nairobi, Kenya. We support clients remotely across East Africa and South-East Queensland, and can travel on-site for hardware deployments and setups.
Can you support a business that operates in both Australia and Kenya?
Yes โ€” this is one of our key strengths. We're one of the only IT firms built to operate across both markets simultaneously. We can set up unified Microsoft 365 tenants, manage cross-border IT governance, and provide dual-timezone support so your AU and KE teams are covered by a single trusted vendor with no communication gaps.
How does the Kenya / Australia region switcher on your website work?
When you visit de4sec.technology, our site automatically detects your location and shows you the most relevant content โ€” Kenyan businesses see Kenya-focused services, Australian businesses see AU-focused services. If the automatic detection doesn't reflect where you are, you can manually switch using the ๐Ÿ‡ฐ๐Ÿ‡ช Kenya / ๐Ÿ‡ฆ๐Ÿ‡บ Australia toggle in the top navigation bar at any time. Your preference is saved for your session.
Do you work with businesses outside Kenya and Australia?
Our primary markets are Kenya/East Africa and Australia, but we do take on clients from other regions โ€” particularly for cloud, M365, and cybersecurity services that can be delivered remotely. Book a discovery call and we'll let you know if we're the right fit for your location and needs.
How quickly do you respond to enquiries?
We aim to respond to all new enquiries within 1 business day. For clients on a managed support retainer, we have agreed SLAs โ€” typically same-day acknowledgement and same/next-day resolution depending on severity. Emergencies are triaged immediately.
๐Ÿ‡ฐ๐Ÿ‡ช Kenya & East Africa
What IT services do you offer in Kenya?
In Kenya we offer a full IT stack: POS system deployment (hardware supply, assembly, software installation, staff training), IT hardware supply and configuration, Microsoft 365 onboarding (email, SharePoint, Teams, Intune), VoIP and Teams Phone, IT helpdesk and managed support, KDPA/ODPC compliance, M-Pesa and mobile payment API security, and Day 2 managed cloud for ongoing AWS/M365 management.
What is KDPA and am I required to comply?
The Kenya Data Protection Act (KDPA) is Kenya's data privacy law, overseen by the Office of the Data Protection Commissioner (ODPC). If your business collects, stores or processes personal data about Kenyan residents โ€” which includes customer records, employee data, payment details, and health records โ€” you are legally required to comply. The ODPC significantly ramped up enforcement and audits on SMEs in 2026, with real fines for non-compliance. De4sec can audit your current data practices and implement the controls needed to keep you compliant.
How quickly can you deploy a POS system for my business?
For a standard single-site deployment โ€” hardware procurement, assembly, software installation and basic staff training โ€” we typically go live within 5โ€“7 business days of confirmed order. Larger multi-site or multi-terminal deployments are scoped individually. We'll give you a firm timeline during the discovery call once we understand your setup.
What POS hardware brands do you work with?
Our founder has hands-on field experience servicing NCR point-of-sale systems โ€” the hardware used by Coles, Woolworths, Kmart and BigW in Australia. For Kenyan deployments we work with NCR and compatible enterprise-grade POS hardware. We can also advise on the best hardware for your specific retail or hospitality environment, including touchscreen kiosks, receipt printers, barcode scanners and EFT terminals.
Do you support M-Pesa and mobile payment integrations?
Yes. We provide security reviews for M-Pesa and mobile payment integrations โ€” including API hardening, access control enforcement, and internal fraud prevention. We don't build the payment integration itself (you'd use your payment provider's SDK for that), but we secure it once it's in place and make sure your systems are hardened before you go live.
We already bought M365 licences through a reseller โ€” can De4sec still help?
Absolutely. We're set up as the "Day 2" operations partner for businesses that already have M365 or AWS licences. We come in after the sale and handle the full secure setup โ€” tenant configuration, IAM, Microsoft Defender, Intune device management, SharePoint structure and user onboarding. You keep your reseller relationship; we handle the secure implementation and ongoing management.
๐Ÿ‡ฆ๐Ÿ‡บ Australia
What IT services do you offer in Australia?
In Australia we specialise in Essential Eight compliance (ML0 โ†’ ML2 pathway), zero-downtime patch management using Microsoft Intune and Defender, secure cloud migration (on-premise to M365 or Azure), cybersecurity and risk assessments, and business IT onboarding and ongoing support โ€” covering new setups, system upgrades, hardware procurement, network setup and managed helpdesk.
What is Essential Eight and does my business need it?
The Essential Eight is the Australian Cyber Security Centre's (ACSC) set of eight baseline cybersecurity controls for protecting organisations. They cover application control, patching, MFA, restricting admin privileges and more. In 2026, Essential Eight compliance is increasingly required by cyber insurers before they'll issue or renew a policy, and by government and enterprise procurement teams before awarding contracts. If you're an Australian SMB pursuing government work, applying for cyber insurance, or heading toward a capital raise, you almost certainly need it. De4sec can take you from Maturity Level 0 to ML2 with a clear audit and remediation pathway.
How does zero-downtime patch management work?
Many SMBs delay patching because they're worried it will break systems or cause downtime during business hours. We solve this by deploying patches out-of-hours โ€” typically overnight or on weekends โ€” using Microsoft Intune and Defender. We test updates in a staging environment first, then roll them out to your devices while your team isn't working. You open for business the next morning with fully patched, secure endpoints and no disruption.
Can you help a new business get set up with IT from scratch in Australia?
Yes โ€” our Business IT Onboarding & Ongoing Support service is designed exactly for this. We handle domain and email setup, Microsoft 365 onboarding, device procurement and configuration, network and WiFi setup, and ongoing helpdesk support. Whether you're a brand new business or an established one that's been patching things together and needs a proper foundation, we'll get you set up right.
Do you service Gold Coast specifically or all of Queensland?
We're based on the Gold Coast and primarily service South-East Queensland โ€” Gold Coast, Brisbane, Ipswich and surrounds โ€” for on-site work. Cloud, M365, patch management and security services are delivered remotely and are available to any Australian business regardless of location.
๐Ÿ’ฐ Pricing & Contracts
How is De4sec's pricing structured?
We offer three engagement models depending on your needs:

Fixed-fee monthly retainer โ€” a flat monthly fee covering an agreed scope of support. Predictable, no surprise invoices.

Per-user monthly โ€” a per-seat fee that scales naturally as your team grows. Common for managed IT and M365 support.

Block hours โ€” buy a bundle of hours upfront and use them as needed. Good for businesses with irregular or project-based IT needs.

One-off projects (POS deployments, cloud migrations, Essential Eight audits) are quoted on a fixed-fee project basis. We'll recommend the best model for you during the discovery call.
Do you charge by the hour?
We prefer fixed-fee and retainer models because they give you cost certainty โ€” you always know what you're paying and you never feel like the clock is running. Hourly billing is available as block hours (pre-purchased) for clients who need flexibility. We don't do open-ended hourly billing that results in unpredictable invoices.
Do I need to sign a long-term contract?
No lock-in contracts. Ongoing support retainers are month-to-month โ€” you can scale up, scale down or cancel with reasonable notice. Project work (POS deployments, migrations, audits) is governed by a straightforward project agreement scoped before we start. We believe the relationship should be earned every month, not locked in.
Are there any hidden fees?
No. We quote transparently โ€” what you're quoted is what you pay. Hardware, licensing and third-party costs (e.g. Microsoft 365 licence fees) are always quoted separately and clearly before purchase. We don't add margins to software licences without disclosure.
What does the free discovery call include?
The free 30-minute discovery call is genuinely free โ€” no sales pressure, no obligation. We listen to your current setup and pain points, identify your 2โ€“3 highest-priority gaps (tailored to whether you're a KE or AU business), and give you a clear recommended next step. Even if you don't engage us after, you'll leave with useful, actionable direction. Book yours here.
๐Ÿ” Security & Compliance
How do you handle sensitive client data?
We operate under strict data handling policies. We only access systems and data with explicit client authorisation, all remote access sessions are logged, and we sign NDAs and data processing agreements where required. We comply with the Australian Privacy Act for AU clients and the Kenya Data Protection Act for KE clients.
Can you help us pass a cyber insurance assessment?
Yes. Many Australian insurers now require businesses to demonstrate a minimum level of cybersecurity maturity before issuing or renewing a cyber policy. Essential Eight ML1 or ML2 is commonly the benchmark. We can audit your current posture, identify the gaps, remediate them, and produce the documentation your insurer needs to see. See our Essential Eight service.
What happens if we have a security incident?
For clients on a managed support retainer, incident response is included. We triage immediately, contain the threat, assess the impact, and work to restore normal operations as quickly as possible. We also help you document the incident for insurance or regulatory reporting if required. For businesses not yet on a retainer, we offer emergency response engagements โ€” contact us immediately and we'll respond same day.
Do you do penetration testing?
We perform security assessments and vulnerability scanning as part of our cybersecurity engagements. For formal penetration testing (particularly where a certified pen test report is needed for compliance or insurance), we can refer you to a specialist pen testing firm and work alongside them. Talk to us about what your specific requirements are.
๐Ÿ–ฅ๏ธ POS & Hardware
What's included in a POS deployment?
A standard De4sec POS deployment includes: hardware procurement (terminals, receipt printers, barcode scanners, EFT devices), assembly and configuration, software installation (POS application, OS, drivers), network integration (ensuring the POS is correctly isolated on its own network segment for security), and staff training on basic operation. Post-deployment, we offer ongoing maintenance and helpdesk support.
Can you upgrade an existing POS system rather than replacing it?
Yes. We assess your existing setup first. If the hardware is still viable, we can upgrade the software, patch the OS, harden the network configuration and update peripherals without a full replacement โ€” often significantly cheaper and faster. If replacement is needed, we'll tell you honestly and give you a scoped proposal.
Do you supply hardware or do I need to source it myself?
We can handle full hardware procurement on your behalf โ€” sourcing, shipping and configuring devices ready for deployment. Alternatively, if you've already purchased hardware, we can work with what you have. We're transparent about hardware costs and don't apply hidden margins โ€” what we pay for equipment is what you pay, plus a clear service fee for procurement management if applicable.
Why does the NCR experience matter for my Kenyan business?
Our founder gained hands-on field experience servicing NCR enterprise POS systems at Coles, Woolworths, Kmart and BigW โ€” some of Australia's most demanding retail environments. This means we understand POS hardware deeply: how it's built, how it fails, how to configure it securely, and how to deploy it across multiple terminals without downtime. Kenyan retailers and hospitality businesses now get access to that same enterprise-level POS expertise โ€” without paying for a foreign consultant to fly in.

STILL HAVE QUESTIONS?

Book a free 30-minute call โ€” we'll answer anything specific to your business and situation.

Book a Free Discovery Call โ†’