Security

IASME Cyber Assurance extends Cyber Essentials with broader controls including data protection and risk management; a data-rich consultancy may want it where clients need more assurance, worked towards via a gap analysis, part of managed IT at about £45 to £100 per user per month.

You allow site software safely by vetting and approving each tool through application control, so engineers get the cabling-certification, test-equipment and design software they need while every unknown program stays blocked by default. Here's how it works.

You control source-code access with security groups and role-based permissions, least privilege, MFA, and regular reviews, so only the right engineers reach the right repositories and access is removed the moment it's no longer needed.

Share the specific folder in SharePoint or OneDrive with view-only permission, require sign-in with MFA, limit scope and time, help collaborators connect, and remove access when the project ends, part of managed IT at about £45 to £100 per user per month.

Back up the document system and SQL database, all case and project files, Microsoft 365 and key configuration using 3-2-1, keep one copy isolated from ransomware, and test-restore regularly, part of managed IT at about £45 to £100 per user per month.

Application allowlisting only lets approved software run, so ransomware and unknown programs are blocked by default, even on busy office and site machines. For a contractor handling payments, it's one of the strongest protections available. Here's how.

Protect case records with frequent backups of the document system and database, at least one isolated copy ransomware cannot reach, an off-site copy, tested restores and a continuity plan, part of managed IT at about £45 to £100 per user per month.

Impossible-travel detection flags when an account logs in from two places too far apart to be the same person, a strong sign of a stolen password. For a contractor, it's an early warning that catches account takeover before fraud. Here's how it works.

Yes. A business password manager stores and generates strong, unique passwords, syncs them across devices, and keeps client logins safe when staff leave. It's far safer than browser-stored passwords and removes a common point of risk.

You protect against ransomware with application allowlisting, managed endpoint protection, email security, MFA and isolated, tested backups. Allowlisting stops it running and good backups mean you never have to pay. Here's the layered defence.