Consultancy

Cyber security consultancy

An independent, experienced view of your security: where you stand today, which risks matter most, and a practical plan to deal with them in the right order.

Talk to us about this
The problem

Most small businesses know security matters, but not where to start or what "good enough" looks like for a business their size. Advice from vendors tends to end in a product, and a long list of findings is no help if nobody says which ones matter.

At the same time, customers, insurers and tenders are asking harder questions, and "we have antivirus" no longer answers them.

What we can do
  • A security review of your devices, accounts, email, network and cloud services, with findings ranked by real-world risk
  • Microsoft 365 security review and hardening: sign-in, multi-factor authentication, admin accounts, sharing and email settings
  • A practical, prioritised improvement plan that fits your budget, not a wish list
  • Security policies written for how your business actually works, including acceptable use, passwords, remote working and incident response
  • Help answering customer, insurer and tender security questionnaires
  • Independent advice on choosing security products and services, whoever supplies them
  • Ongoing advice as and when you need it, without a full-time hire
Who it's for

Small and medium-sized businesses without an in-house security specialist, businesses whose IT provider wants a second opinion, and anyone facing a security questionnaire from a customer, insurer or tender.

How it's charged

Work is charged at our standard day rate. We agree the scope and the number of days with you before anything starts, so there are no surprises, and it's invoiced separately from any monthly services.

How it works
  1. Initial conversationWhat prompted the call, what you already have in place, and what you need at the end.
  2. ReviewWe look at your systems and settings, and talk to the people who run them.
  3. Report and planFindings in plain English, ranked by risk, with a step-by-step plan to fix them.
  4. Help putting it rightIf you want, we make the changes with you or your IT provider, or check them afterwards.
Who does the work

Andy Martin spent 20 years at Sophos, supporting, selling and training others on its security products, and is a Certified Ethical Hacker (CEH). Advice is vendor-neutral: we recommend what fits your business, whoever makes it.

Questions
No. We're a Sophos partner, so we'll tell you when a Sophos product fits, but the review covers what you already have and recommends the right fix for each gap, whoever supplies it. Often the best fixes are settings you already pay for.
Maybe not. Plenty of IT providers do security well. A review gives you an independent view of where things stand, and we're happy to work through the findings with them.
We don't carry out Cyber Essentials certification ourselves. Many of the gaps it looks for come up in a security review, though, so a review is a useful first step before you apply.

← Back to all consultancy services

Got a project in mind?

Tell us what you're trying to do and we'll tell you honestly whether we can help, how long it's likely to take, and what it would cost. No obligation.

Talk to us →
or
See every consultancy service →