Small business data security you can explain to a customer
Most small business breaches start with something ordinary: a reused password, an old login, an untested backup. We help you close those gaps and keep a record you can show a customer.
Who this is for
For teams of two to twenty with no IT person, running on Google Workspace or Microsoft 365, a handful of cloud tools and a few freelancers. You hold client information and you would like to stop quietly hoping it is fine. This page is for you.
The everyday holes we keep finding
Passwords reused everywhere
Logins sit in a spreadsheet, the same password is reused across tools, and email has no two step sign in. Yet email is the key to resetting everything else.
Backups nobody has tested
Cloud storage happily syncs a deleted folder along with the good ones. Many owners only discover whether a backup works on the day they badly need it.
Suppliers you never checked
Your booking tool, your accountant's portal and a freelancer's laptop all touch your data. Few owners know who holds what, or what happens if a supplier is hacked.
One client's data near another's
Shared folders and copied templates carry details between clients. One wrong attachment is enough for a confidential name to reach exactly the wrong person.
Closing the gaps, in order of risk
Scope &
Strategy
We list your systems, data and suppliers and check them against the five Cyber Essentials controls: firewalls, secure settings, access, malware protection and updates. You get a plain, ranked report.
About Scope & StrategySystems &
Solutions
We put the fixes in: a password manager, two step sign in, access by role, encrypted and tested backups, and a set up where each client's information sits in its own separate space.
About Systems & SolutionsSecurity &
Support
We run regular check ins covering updates, access reviews after joiners and leavers, supplier checks and a rehearsed plan for a lost laptop or a phishing click. Nothing is published in your name until you approve it.
About Security & SupportQuestions people ask
What are the Cyber Essentials controls?
They come from a UK government backed scheme run with the NCSC and cover five areas: firewalls, secure configuration, user access control, malware protection and security update management. You can follow them without taking the formal assessment. Check the NCSC website for the current scheme.
How do I protect client data in a small business?
Know where it is, limit who can see it, keep each client separate, use two step sign in, encrypt devices, back up and test the backup, and delete data you no longer need. None of that needs an IT department, just decisions made once and checked regularly.
What should I do if there is a data breach?
Contain it first: change passwords, cut access, stop the spread. Then assess whether personal data was involved. If it is likely to put people at risk, you may have to report it to the ICO within 72 hours of finding out. Read the ICO guidance now, not mid crisis.
Where do I start with data security for my business?
Start with a conversation. Tell us which tools you use and who has access to what, and we will point out the two or three gaps most worth closing first. You decide whether to go further, and nothing is committed on the call.
Talk to us about data security and compliance.
You tell us what is going on. We tell you honestly whether we can help, and if we cannot, we will say so.