Pillar 06 · Cyber Security

Cyber Security

Protection for every device, mailbox and network, multi-factor sign-in everywhere, Cyber Essentials certification, and your insurer's questionnaire answered from what is in place.

What it is

Security for a company of 20 to 200 people is mostly discipline: every device protected, every sign-in with a second factor, every patch applied, every alert looked at by a person. The tools matter, but the habit matters more, and the habit is what we bring.

We keep it plain. No dashboards you are expected to interpret and no annual scare story. A baseline that is always on, a short list of what is outstanding, and someone accountable when the insurer, the auditor or a customer asks.

Who it is for
  • →Companies whose insurer, customers or auditors are asking harder questions each year.
  • →Firms that want Cyber Essentials without doing the paperwork themselves.
  • →Anyone who has had a near miss and does not want the real thing.
What is included

In plain words

  • Protection on every device, monitored, with alerts acted on
  • Email security: the phishing and impersonation that gets past the basics
  • Multi-factor sign-in and conditional access across the tenant
  • Patching, on a schedule, with the stragglers chased
  • Firewalls and network security for each site; managed WiFi and secure VPN between sites and for people on the move
  • Cyber Essentials and Cyber Essentials Plus, run for you from start to certificate
  • Staff awareness training, short and regular
  • Incident response, and the insurer and customer questionnaires answered
In the portal

How it shows up day to day

You do not have to watch a security dashboard. Where it matters to you, the portal shows which devices are protected and up to date, and what is outstanding, without the jargon.

See the portal →

2006
Established
20
Years
3
Offices in and around London
6
Regions where we run client sites
8
Services under one agreement
Questions

Questions people ask

Do we need Cyber Essentials?
If a customer, a tender or an insurer asks for it, yes. It is also a sensible baseline on its own: five controls, applied properly. We run the process and the renewal each year.
Is this included in Managed IT?
The basics are: protection on every device, multi-factor sign-in, patching. Certification, network security kit and specialist tools are agreed and priced separately, so you can see them.
What happens if something gets through?
You ring us. An engineer takes it from there: contain it, recover, and tell you plainly what happened and what changes. Then we help with your insurer's questions.
What does a typical attack on a company our size look like?
It usually starts with an email rather than a break-in. Someone's password is guessed or phished, the attacker signs in, and quietly adds a rule that forwards any email mentioning invoices, bank details or payroll to an outside address. Weeks later a supplier's bank details 'change'. Multi-factor sign-in stops the sign-in; watching for those rules catches the rest.
What can our own staff do?
Five habits. Never store passwords in a browser, a notepad or a personal email. Turn on multi-factor sign-in for personal accounts too. Forward any email that asks for a password to us before clicking. If a sign-in prompt appears that you did not cause, deny it. And if you think a password has leaked, ring us and say the word urgent.

Not sure where you stand?

Eight questions, sixty seconds, a first reading on the spot.

020 3021 1220Take the 60-second health check