Network and cyber security
Most security incidents at businesses come down to the basics: an old account nobody closed, a firewall rule left open, a backup that was never tested. I check those properly, explain the risks in plain terms and help you put them right in a sensible order.
That covers firewalls and UTMs, VLANs that keep guests, cameras and servers apart from staff devices, access rights, and endpoint protection with EDR on every device. Where specialist testing is needed, I arrange vulnerability scans and penetration tests with trusted partners, and put the findings right as part of the work.
For a business without its own head of IT, a fractional CTO keeps security on the agenda after the fixes are made.
For a plain-English starting point, the NCSC’s Small Business Guide covers the basics every business should have in place.
What it involves
Firewalls and UTMs
Firewall and UTM rules reviewed and tightened, with web filtering, intrusion prevention and remote access set up properly, and anything left open closed off.
Network separation
Switches and VLANs set up so guest devices and cameras are kept apart from staff and servers, which limits how far a problem can spread.
Who has access to what
Every account and permission checked against the people who work for you now, so leavers lose access and staff have what their job needs.
Endpoint protection and EDR
Endpoint protection with EDR on every device, monitored and up to date, so unusual activity is caught and stopped early.
Questions about a security review
We’re a small business. Are we really a target?
Most attacks aren’t aimed at anyone in particular. They’re automated, trying passwords and known weaknesses against any business they can reach, and small firms are often easier to get into. Getting the basics right makes you a much harder target.
What’s the difference between antivirus and EDR?
Traditional antivirus looks for known malicious files. EDR, short for endpoint detection and response, watches how programs behave on each device. It can spot and stop unusual activity, such as ransomware encrypting files, and records what happened so it can be investigated.
What should we do if we think we’ve been hacked?
Disconnect the affected devices from the network but leave them switched on, change passwords from a device you trust, and get help quickly. I can help contain the incident, recover data and close the gap that let it happen. If personal data is involved, you may need to report it to the ICO within 72 hours.
Related services
Business WiFi and networks
Networks and WiFi planned around your building and how your staff work, with secure links between sites and for home workers.
Backup and disaster recovery
Backups that follow the 3-2-1 rule and are tested, plus a plan, and cloud recovery, for keeping the business going.
IT policies and procedures
Written procedures that reduce risk and make IT predictable, from starters and leavers to incident response.
Interested in a security review?
