Most attacks start with a convincing email, a reused password or a laptop that missed an update. We build strong foundations, manage them every month and watch your devices around the clock.
Every Managed Cyber Assurance customer begins with the same proven standard: a secure baseline aligned to Cyber Essentials and NCSC guidance. It covers everything from multi-factor authentication and admin access to device encryption, email protection, backups and firewalls. We assess your current set-up against this baseline, show you the gaps, then configure and implement whatever’s missing, so your business is built on strong, consistent security foundations from day one.
Cyber security isn’t set-and-forget. Threats change, settings drift and people come and go. Managed Cyber Assurance is our monthly support service, built around the security tools in your Microsoft 365 licences. We review six areas where things tend to slip and fix what we find before it becomes a problem.
Most attacks start with a stolen or weak login. We check that MFA and conditional access are working for everyone, keep admin accounts locked down, and review who has access to what, including guests and old accounts that should have been closed.
We check your email, Teams and SharePoint settings against a secure baseline and keep your domain’s SPF, DKIM and DMARC correct, so it’s harder to impersonate you. Your Microsoft Secure Score is reviewed every year to prioritise improvements.
Every laptop, phone and server is a way in. We check that your devices are encrypted, up to date and configured to a secure baseline, with apps kept patched and admin rights kept tight. Any device that falls out of line gets flagged and fixed.
Your firewall is the front door to your network. We review its configuration, policies, remote access and threat protection, check for vulnerabilities and out-of-date firmware, and recommend clear fixes.
If something goes wrong, we help you investigate and contain it, then review what to strengthen so it doesn’t happen again. We also check that your backups cover the right systems, are kept for the right length of time, and are encrypted.
Cyber Essentials shouldn’t be a scramble once a year. We keep your controls aligned to it and NCSC guidance all year round, document any exceptions, and give you a clear roadmap for what to improve next.
We review your current set-up against our security baseline.
We configure anything missing and bring you onto the service.
We run scheduled reviews to confirm your controls are still working.
We give you clear recommendations so your security gets stronger over time.
Add the services that fit your business, as and when you need them.
Endpoint detection and response on every laptop and server, watched round the clock by expert analysts in a Security Operations Centre. If a threat is found, affected machines are isolated before an attack can spread.
Ransomware, accidental deletion or a lost laptop shouldn’t cost you your data. We automatically back up your email, cloud files, laptops, desktops and servers to encrypted cloud storage, so single files or whole systems can be restored fast.
Your people are your first line of defence. Short, engaging training sessions and realistic phishing simulations help your team spot scams before they click, with reporting that shows who’s improving and where extra support is needed.
Find your weak spots before attackers do. We scan your systems for known vulnerabilities and run penetration tests that safely simulate a real attack, then give you a clear, prioritised report in plain English showing what to fix first.
“Knowing that our IT infrastructure is managed by such a dedicated and skilled team gives us invaluable peace of mind.”
The UK government-backed certification that shows customers, suppliers and insurers you’ve got the basics covered. We’ll prepare your business, fix the gaps and manage the certification for you.
A verified self-assessment of five core security controls. The foundation, and often the minimum asked for in tenders.
The same five controls, independently tested on your systems by an assessor. It carries more weight with customers and insurers.
Our free readiness assessment shows how your current set-up measures up against Cyber Essentials, so you know where you stand and what needs to change before you apply.
book your readiness assessmentWe start with a short call to understand your business, your IT set-up and what you need Cyber Essentials for.
One of our technical leads will take you through a series of plain-English questions about how your IT works day to day. These cover your devices, the apps and cloud services you use, who has access to what, how everything is kept up to date and how you’re protected from malware.
You’ll receive a plain-English report showing what already meets the standard, where the gaps are, and our recommendations for closing them, along with a clear route to certification.
Both certify your business against the same five security controls, but they check them in different ways. For Cyber Essentials, you complete a self-assessment questionnaire and a qualified assessor reviews your answers. Cyber Essentials Plus goes a step further, with an assessor testing your devices and systems to confirm the controls actually work. Because it carries more weight with customers and partners, more tenders and supply chains now ask for it.
If your security controls are already in place and you know exactly which devices, software and users you have, you can often achieve Cyber Essentials within a few weeks. Most of the time goes on fixing gaps beforehand, such as switching on multi-factor authentication (MFA) or replacing devices that no longer get security updates. Cyber Essentials Plus takes a little longer, because it adds a hands-on technical audit. Our free readiness assessment shows you how much work is needed before you apply.
IT support keeps your technology running, while Managed Cyber Assurance makes sure it’s secure. Your IT support team fixes problems, installs updates and helps your people day to day. Managed Cyber Assurance regularly checks that the right security controls are in place and working, spots gaps and settings that have drifted, and gives you clear recommendations. The two work hand in hand, and you can use Managed Cyber Assurance no matter who provides your IT support.
A Security Operations Centre (SOC) is a team of security analysts who monitor your systems around the clock and act on threats as they happen. Attacks don’t keep office hours, and many start at night or at weekends, when nobody’s watching. Very few small and mid-sized businesses could build their own SOC, but our managed EDR service gives you 24/7 SOC protection without that cost.
They’re an important starting point, but on their own they’re no longer enough. A firewall controls what gets in and out of your network, and antivirus blocks threats it already recognises. Today’s attacks often use stolen logins, phishing emails or new malware that neither will spot. Endpoint detection and response (EDR) watches for suspicious behaviour on every laptop and server, with security analysts on hand 24/7 to isolate an affected machine before an attack spreads.
Not in the way most people think. Microsoft keeps its service running, but it doesn’t guarantee to restore data you lose. Accidental deletion, ransomware or a leaver’s account being removed can all mean lost emails and files. Microsoft recommends using a separate backup, which is why we back up your email, OneDrive, SharePoint and Teams independently, so you can restore what you need, when you need it.
The Cyber Essentials certification fee is set by IASME, the organisation that runs the scheme, and it’s based on the size of your business, so you pay the same whichever certification body you use. Cyber Essentials Plus costs more because it includes a hands-on technical audit, and it’s quoted individually. The bigger cost is often fixing gaps before you apply, which is why we start with a free readiness assessment, so you know what’s needed before you spend anything.
Cyber Essentials and Cyber Essentials Plus certificates are valid for 12 months, so you’ll need to recertify every year. Each renewal is a full new assessment, and the requirements are updated from time to time, so controls that passed last year won’t always pass this year. Managed Cyber Assurance keeps your security aligned to the standard all year round, which makes renewal a formality rather than a scramble.
Regular, practical training makes the biggest difference. Our security awareness training uses short, engaging lessons and realistic phishing simulations, so your team learns to spot a scam in a safe environment rather than the hard way. You’ll see reports showing who’s improving and where extra support is needed. Combined with strong email security and multi-factor authentication (MFA), it means one wrong click is far less likely to become a serious problem.
Most cyber insurers now expect key security controls to be in place before they’ll offer cover, and they may ask you to confirm them each year. These often include multi-factor authentication, up-to-date devices, endpoint protection, regular backups and staff training. If a claim is made and the controls you declared weren’t actually in place, it could affect your pay-out. We can help you put these controls in place and keep them working, so you can answer your insurer’s questions with confidence.
