Services

IT review and interim IT management

For businesses that rely on an IT supplier but have no one inside the business to direct them. We work in two phases, and you can stop after the first.

Download an example report (PDF)

Phase 1: review

We look at your technology setup, Cyber Essentials position, Microsoft 365 and supplier arrangements, and talk to the people who use and support them.

What you get from Phase 1

A findings summary and gap analysis, prioritised recommendations, the decisions your leadership needs to make, and a first risk log (RAID) with an action plan.

Phase 2: delivery

We act as your day-to-day internal IT team: coordinating your suppliers, checking and challenging their recommendations, and seeing each action through to completion.

What you get from Phase 2

Actions delivered, clear ownership of anything outstanding, and regular reporting so you can see where your technology risks stand.

Cyber Essentials and Cyber Essentials Plus

Cyber Essentials is the UK government-backed scheme that shows you have the basic protections in place. More clients, public sector buyers and insurers now ask for it.

Ask about Cyber Essentials

See an example gap analysis (PDF)

Readiness check

We go through your firewalls, device and software settings, updates, user accounts and malware protection against the Cyber Essentials requirements, and show you where you'd currently fail.

Fixing the gaps

A clear plan to close each gap. We can make the changes ourselves or work alongside whoever looks after your IT.

Getting ready to submit

Help preparing your self-assessment answers, so they're accurate and backed up by how your systems are actually configured.

Cyber Essentials Plus

Preparation for the independent technical audit, including checking devices and accounts before the assessor does.

Certification itself is awarded by an independent certification body. We prepare you for it; we don't issue the certificate.

Microsoft 365 security review

Most small businesses run on Microsoft 365, and most tenants have settings left at defaults nobody has looked at since setup. This review finds what matters and leaves nothing changed without your say-so.

Ask about a review

Sign-in and access

Multi-factor authentication, Conditional Access, old sign-in methods that bypass MFA, and who holds admin rights.

Email

Forwarding rules sending mail outside the business, anti-phishing and spoofing protection, and mailbox access.

Files and sharing

What's shared with people outside the business through SharePoint, OneDrive and Teams, and whether it should be.

Devices

Whether laptops and phones accessing company data are managed, encrypted and kept up to date.

A plain-English report

Findings ranked by risk, with what each one means for your business and how to fix it.

The review is read-only. We don't change any settings unless you ask us to.

Ongoing security support

For businesses that need someone to own security but can't justify a full-time hire. Sometimes called a virtual CISO. You get a named person who knows your setup and is there when you need them.

Ask about ongoing support

Policies and paperwork

Security policies that reflect how you actually work, and help answering security questionnaires from clients and suppliers.

Staff awareness

Short, practical sessions on phishing, passwords and handling data, tailored to your team.

Keeping standards up

Regular checks of your Microsoft 365 and devices, and your Cyber Essentials renewal each year.

Advice when it counts

A first call if something looks wrong, such as a suspicious email, a compromised account or a lost laptop.