What to do in the first hour of a ransomware attack
A step-by-step checklist for the first hour of a ransomware attack: what to do, what not to do, and who to call.
Read the guidePlain-English answers to the questions small businesses ask us most about protecting their devices, email and data.
What to do first if you think you have been attacked, a laptop has gone missing or an account has been taken over.
A step-by-step checklist for the first hour of a ransomware attack: what to do, what not to do, and who to call.
Read the guideThe warning signs of a hacked Microsoft 365 account, the steps to take straight away, and why multi-factor authentication alone no longer keeps attackers out.
Read the guideWhen a business must report a cyber attack or data breach to the ICO, the 72-hour rule, who else to tell, and what to record.
Read the guideWhy disk encryption decides whether a lost laptop is a data breach, what to do in the first hour, and how to check BitLocker and FileVault today.
Read the guideWhat the different kinds of protection do, what they cost and which ones a small business actually needs.
EDR, XDR and MDR explained in plain English, with a simple way to decide which one your business needs.
Read the guideReal per-user prices for antivirus, EDR, XDR and 24/7 MDR, worked examples for 5, 15 and 40 people, and what else to budget for.
Read the guideWhen a small business needs a firewall, when it doesn't, why the broadband router isn't enough, and what to look for in a business firewall.
Read the guideThe security features that matter in web hosting, from updates and backups to HTTPS and monitoring, who is responsible for what, and the questions to ask any host.
Read the guideHow a VPN and zero trust network access (ZTNA) differ, whether you need either, why attackers target remote access, and the basics every home worker setup needs.
Read the guideGetting ready before anything goes wrong: insurance questionnaires, security testing and a plan for the worst day.
The security questions cyber insurers ask, what they are looking for, and how to answer the proposal form honestly and confidently.
Read the guideWhat a penetration test costs, what drives the price, how long a small business test takes, and how to avoid paying for the wrong test.
Read the guideA simple incident response plan for a small business: who does what, who to call and what to write down, with an outline you can adapt today.
Read the guideWhat a vulnerability scan and a penetration test each find, how often you need them, and which a small business should start with.
Read the guidePhishing, payment fraud, AI tools and staff phones: helping your team work safely, with simple rules to back them up.
The tell-tale signs of a phishing email, common examples, what to do with a suspicious message, and a short checklist to share with your staff.
Read the guideHow criminals use hacked or look-alike email accounts to redirect real payments, the warning signs, and five checks that stop it.
Read the guideThe real data risks of ChatGPT, Copilot, Claude and Gemini at work, the difference between personal and business accounts, settings to check first and what to put in an AI policy.
Read the guideHow phishing simulation works, whether it changes staff behaviour, what good security awareness training looks like, and how to run it without upsetting your team.
Read the guideHow to protect work email and data on staff phones, company-owned or personal, without taking over personal devices, plus what to put in a simple BYOD policy.
Read the guideTell us a little about your business and we'll recommend the controls that will work best for you, with no obligation and no jargon.
Talk to us
or
See every security area
Our experts spent 20 years at Sophos and include a certified ethical hacker.
More about us
