Cyber Security for Business in Mildenhall

What cyber security for business actually means

Cyber security for business is not a single product you buy once and forget. It is a set of practical controls - software settings, account permissions, backup routines, monitoring and staff habits - that work together to reduce the chance of your data being stolen, encrypted by ransomware or accessed by someone who should not have it. For a small business running Windows PCs or laptops and using Microsoft 365, the exposure points are email, login credentials, unpatched software and poorly configured cloud settings.

A phishing email that tricks one member of staff into entering their Microsoft 365 password can give an attacker full access to your email, shared files and contacts within minutes. That is not a hypothetical - it is the most common route into small business systems in the UK today. Controls like multi-factor authentication, email filtering and monitored backups exist specifically to limit the damage when that happens.

How to choose a cyber security provider - what to ask before you agree

This is the question Mildenhall business owners ask us most when they are shopping around, and it is the right one to start with. The market is full of providers making broad claims. Here is what to actually probe before you sign anything.

Ask what is included as standard and what costs extra

Some providers quote a headline price that covers monitoring only. Patching, backup management, incident response and Microsoft 365 configuration are then billed separately. Ask for a written list of every task the contract covers. If a provider is vague about this, that vagueness will cost you money later.

Ask whether support is office hours or around the clock

Check whether support is office hours only, including for emergencies. That can be an honest arrangement and suits many small businesses day to day. Be wary of providers who claim round-the-clock cover without explaining how it is staffed; a monitoring alert at 2am is only useful if a qualified engineer acts on it promptly and correctly.

Ask how they handle Windows updates and patching

Unpatched Windows PCs are one of the most exploited weaknesses in small business networks. Ask whether patch management is automated, how quickly critical patches are applied after Microsoft releases them, and whether you will be told about any that require testing before deployment. A provider who cannot answer this clearly is not managing your security properly.

Ask about backups - where, how often and how they are tested

Most businesses have some form of backup, but many find when it matters that it has not been running, or that the restore has never been tested. Ask specifically: where are backups stored, are they stored off-site or in a separate cloud environment from your main data, and how is a restore tested? A backup that sits in the same Microsoft 365 tenant as your live data gives you very little protection against a ransomware attack or accidental deletion at tenant level.

Ask whether Microsoft 365 configuration is reviewed

Microsoft 365 ships with many security features switched off by default. A competent provider will audit your tenant settings - things like legacy authentication protocols, external sharing permissions on SharePoint and OneDrive, and whether admin accounts have multi-factor authentication enforced. Ask whether this review is part of onboarding or an add-on.

Ask how they are paid and how the contract works

Understand whether you are paying per computer or per user, what the minimum term is, and what happens if you need to add or remove machines mid-contract. Our contracts are billed per computer per month, which keeps costs predictable as your headcount changes independently of your hardware. There is no per-user surcharge.

Ask what happens if something goes wrong

No security setup is impenetrable. Ask the provider what their incident response process looks like. Who do you call? What steps do they take to contain a breach? Do they have a documented process or are they making it up as they go? You want a provider who can describe the steps clearly, not one who promises breaches will never happen.

Red flags to watch for in a sales conversation

A provider who promises complete protection from all cyber threats is either misinformed or not being straight with you - no technical control eliminates risk entirely. Similarly, a provider who leads with features rather than asking questions about your current setup and how you actually work day to day is selling a product, not solving your problem.

Watch out for vague references to compliance frameworks or accreditations without being able to explain what they mean for your specific setup. Ask what a particular certification means in practice for a Windows-only small business using Microsoft 365 - if the answer is waffle, treat it accordingly.

What our cyber security service covers

We work with Windows PCs and laptops and Microsoft 365. We do not support Apple Mac environments. Our service is built around three priorities: keeping your systems patched and monitored, making sure your data is backed up and recoverable, and helping your team avoid the most common human errors that lead to breaches.

• Threat monitoring and managed security updates for Windows devices
• Microsoft 365 security configuration and review
• Managed backups with tested recovery processes
• Email filtering to reduce phishing and malicious attachment risk
• Multi-factor authentication setup and enforcement
• Practical advice for staff on recognising threats
• Managed email service available separately

What does cyber security support cost?

Our support contracts are priced per computer per month (all prices exclude VAT). The Business Essentials plan covers unlimited remote and phone support, updates, backups and security monitoring. On-site visits are charged separately at a £60 call-out fee plus labour. Business Premium includes on-site labour and call-outs within the monthly price.

Business Essentials (per computer per month, ex VAT):

• 1 computer: £36
• 2 to 3 computers: £31.20 each
• 4 to 9 computers: £25.20 each
• 10 to 17 computers: £22.20 each
• 18 or more computers: £21.60 each

Business Premium (per computer per month, ex VAT):

• 1 computer: £54
• 2 to 3 computers: £42 each
• 4 to 6 computers: £38.60 each
• 7 to 9 computers: £33.80 each
• 10 to 12 computers: £31.20 each
• 13 to 15 computers: £28.40 each
• 16 to 19 computers: £25.40 each
• 20 or more computers: £24.40 each

If a monthly contract does not suit your business, we also offer prepaid time blocks: 4 hours for £312, 8 hours for £592, or 16 hours for £1,123 (all ex VAT).

Based in Bury St Edmunds, serving Mildenhall and nearby businesses

We have been supporting businesses from our Bury St Edmunds base since 1990. We work with businesses in Mildenhall and across the surrounding area, including Newmarket, Ely, Thetford and further into Suffolk. If you are looking for IT support that includes proper cyber security controls rather than a box-ticking exercise, call us to talk through what your setup actually needs.

Before you agree to anything, use the questions above. Whether you end up working with us or someone else, the answers you get will tell you a lot about what you are actually buying.