IT Security

Most cyber attacks on small businesses aren't sophisticated. They succeed because a password was reused, an update was missed or a backup didn't work. We help you get the basics right and keep them that way.

Cyber Essentials

For most small businesses, the government-backed Cyber Essentials scheme is the right place to start. It covers five areas: firewalls, secure configuration, security updates, user access control and malware protection. Many customers and insurers now ask for it.

We help businesses prepare for Cyber Essentials, put the required controls in place and complete the verified self-assessment, and we handle the annual renewal. If you need Cyber Essentials Plus, we'll prepare your systems for the Certification Body's technical audit.

Security audits

A security audit starts with a review of:

  • Your network, including the firewall, switches and Wi-Fi.
  • Your servers and the services they provide.
  • A typical computer's configuration and updates.
  • Microsoft 365 accounts, two-factor authentication and admin access.
  • Remote working and personal-device arrangements.
  • Backups, and whether they can be restored.

You receive a written list of recommendations, with the reasoning, options and costs for each. We scope and quote security audits before we start, or you can begin with our free IT audit.

Regular vulnerability scans

We can carry out regular vulnerability scans to identify security weaknesses in your systems, such as missing updates, exposed services and configuration issues. Scanning regularly helps you spot new problems as your systems change, rather than relying on a one-off review.

Firewalls

We install, configure and maintain firewalls from small business routers such as DrayTek through to Zyxel, SonicWall and Sophos. We have also secured networks for FCA and SRA regulated businesses using Cisco and Palo Alto equipment.

Antivirus and device management

Our preferred antivirus is ESET, which we manage and monitor centrally. We also use remote management tools to keep computers updated and to spot problems early.

PCI compliance

If you take card payments, we can help with the network side of PCI compliance, such as configuring firewalls and routers and fixing issues found by vulnerability scans.

Ongoing staff security training

We offer access to the usecure platform for ongoing IT security awareness training for your staff. It combines regular training with simulated phishing emails to help people recognise suspicious messages and avoid common security mistakes.

The platform also includes policy management, so you can share your IT security policies with staff and track who has acknowledged them.

Policies and procedures

We have a library of IT policies and procedures that we can adapt to your business, so you don't have to start from a blank page.

Think you've been hacked?

If you've clicked a suspicious link, can't get into an account or think something is wrong, call us straight away on 0800 7879 258, from 8am to 6pm Monday to Friday. Contract clients can use our out-of-hours emergency line.