FAQ
Small business cyber security questions, answered
Do you only work with businesses in Guildford?
No. I'm based in Guildford and offer on-site support across Surrey, Hampshire, West Sussex, Berkshire and south-west London, plus remote support anywhere in the UK.
What size of business do you work with?
Mainly sole traders and small businesses with 1–50 staff who need focused, affordable cyber security help rather than a large managed service.
Do I need a long contract?
No. Most work is one-off and fixed price. Ongoing support is available monthly with no long tie-in.
Are you a replacement for my IT support company?
No — I'm an independent cyber security specialist and work happily alongside your existing IT provider.
How quickly can you help after a cyber attack?
For incidents, call straight away. Phone triage is usually same day, with on-site help in Guildford and nearby towns where needed.
How long does Cyber Essentials take?
Most small businesses are ready to submit within 1–4 weeks, depending on how many fixes are needed.
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is a verified self-assessment. Plus adds a hands-on technical audit of your devices and systems by an assessor.
How much does a cyber security audit cost for a small business?
Fixed-price audits for businesses of 1–50 staff are quoted up front after a free 20-minute call.
Will an audit disrupt my staff?
No. Most of the work is done with read-only access and short conversations with key people.
Do I need to buy extra licences?
Often not. Many protections are already included in Business Standard or Business Premium plans.
What is DMARC and do I need it?
DMARC tells receiving mail servers how to treat emails pretending to be from your domain. Google and Microsoft now expect it from businesses.
Can training be delivered at our office?
Yes, on-site training is available across Guildford and Surrey, or remotely for any UK team.
Is Microsoft 365 backed up automatically?
Not fully. Microsoft keeps the service running but recommends a separate backup for your mailboxes and files.
What should I do first if my business is hacked?
Disconnect affected devices from the network, don't pay any ransom, change passwords from a clean device, and call for help.
Can you work alongside our existing IT company?
Yes. I often act as an independent security advisor working with your current IT support provider.
Do small businesses need to comply with GDPR?
Yes. UK GDPR applies to any business that processes personal data, regardless of size.
How often should a small business run a vulnerability scan?
At least quarterly, and after any significant change to your website or network.
Need cyber security help in Guildford?
Book a free, no-obligation 20-minute call. Plain English, fixed prices, no long contracts.