Cyber Security Support for UK Small Businesses

What cyber security support actually means for a small business

For a business with 3 to 50 staff, cyber security is not a security operations centre or a wall of dashboards. It is a short list of controls done properly and kept done: every account protected by multi-factor authentication (MFA), every device patched, nobody browsing the web as an administrator, malware protection switched on and reporting, a firewall that is not still on its factory password, and backups that you have actually tested.

According to the UK Government's Cyber Security Breaches Survey 2025/2026, 43% of UK businesses reported a cyber security breach or attack in the previous 12 months, and phishing was by far the most common type, affecting 38% of businesses. The same survey found only 47% of businesses use two-factor authentication. That gap is where most of our work sits: closing the obvious doors before someone walks through them.

dijitul support does this work for you, explains it in plain English, and keeps it in place month after month.

What we look after

• Accounts and sign-in: MFA on Microsoft 365, Google Workspace, banking portals and your website admin; Microsoft 365 Security Defaults or Conditional Access; removing old accounts left behind by leavers. See password and MFA setup.
• Devices: Windows and macOS updates, BitLocker or FileVault encryption, local admin rights removed, Microsoft Defender checked and reporting. Larger teams can manage this centrally with Intune.
• Email: SPF, DKIM and DMARC records, anti-phishing policies, external sender warnings. See email security.
• Network: router and firewall firmware, default passwords changed, remote access tidied up. See firewall support.
• Website: CMS and plugin updates, security monitoring and daily backups, all included from our Essential plan at £25 a month + VAT.
• People: short, practical staff security training on spotting phishing and reporting mistakes quickly.

How we start: a quick look, then a fix list

We begin with a remote review of the things that matter most. Who has admin rights in Microsoft 365? Is MFA enforced for everyone, or only offered? Which devices have not checked in for updates? Are there forwarding rules sending mail outside the business? Is your router running firmware from 2019?

You get a short, prioritised list in plain English: what is urgent, what can wait, and what it will cost to fix. For many small offices the urgent items fit inside a few hours of work at £45 an hour + VAT. If you would rather have it looked after continuously, the Complete plan at £99 a month + VAT includes 3 hours of fixes each month plus IT and Microsoft 365 helpdesk support for your team. For a more formal written review, see our security audit page.

When something has already gone wrong

If an account has been compromised, a laptop is showing ransom notes or a supplier has emailed to say your mailbox is sending them invoices, speed matters more than anything. Call us on 01623 650333 or 07425 323333. Our first steps are usually the same:

1. Reset the affected password and revoke active sessions so the attacker is signed out everywhere.
2. Check for inbox rules, forwarding and newly registered MFA methods the attacker may have added.
3. Disconnect affected devices from the network without switching them off, to preserve evidence.
4. Work out what data was reachable, so you can decide whether the incident needs reporting to the ICO within 72 hours under UK GDPR.
5. Restore cleanly from backup where needed. See ransomware recovery and phishing protection.

Report cyber crime to Report Fraud, which replaced Action Fraud as the national reporting service on 4 December 2025, at reportfraud.police.uk or on 0300 123 2040.

Cyber Essentials, insurance and customer questionnaires

More customers, insurers and public sector buyers now ask whether you hold Cyber Essentials. We help you get your systems ready for the self-assessment and fix the gaps the question set will expose, such as missing MFA or unsupported operating systems. We are not a certification body and do not issue certificates; you apply through an IASME certification body. Our Cyber Essentials readiness page explains how that works.

We can also help you answer the IT sections of insurer and supplier security questionnaires honestly, so the answers match what is really set up.

What it costs

Support plans from £25 a month + VAT, or £45 an hour + VAT for one-off fixes. Pick a plan if you want it looked after every month, or pay by the hour for a one-off job.

Related