Cyber Security for Business in Newmarket

What cyber security for business actually means

Cyber security for business is the set of controls, processes and monitoring that stops unauthorised people getting into your systems, stealing your data or locking you out of your own files. For most small businesses, it comes down to four things: keeping software patched and up to date, controlling who can access what, backing up data properly, and having someone watching for unusual activity. Get those four things right and you have removed the vast majority of risk.

We support Windows PCs, laptops and Microsoft 365 for businesses in Newmarket and across the area back to Bury St Edmunds. We do not cover Apple Mac environments. Check when support is available, including whether emergency support is included, so you know who to call if something goes wrong on a working day.

The warning signs your business should not ignore

Most cyber incidents do not arrive with a loud alarm. They start quietly, and by the time the damage is obvious the attacker has often been inside a system for days or weeks. Knowing what to look for gives you a chance to act before it gets expensive.

• Staff receiving unexpected password-reset emails. If nobody requested a reset, someone else tried to log in. A single occurrence might be coincidence; two or more in a short period is a pattern worth investigating immediately.
• Microsoft 365 accounts sending email nobody wrote. Attackers who gain access to a business email account often use it to send phishing messages to your contacts. The first sign is usually a reply from a confused customer or supplier, or a bounce notification for a message your team never sent.
• Computers running slowly for no obvious reason. Malware, particularly ransomware in its early stages, uses processing power and disk activity. A machine that was fast last week and is sluggish today without any new software installed warrants a look.
• Unfamiliar user accounts or admin accounts appearing. Attackers frequently create a hidden account so they can return even after a password change. If your IT system shows an account nobody recognises, treat it as a serious warning sign.
• Files with changed extensions or that will not open. This is often the first visible sign of ransomware actively encrypting data. At this point, disconnecting affected machines from the network immediately limits how far it spreads.
• Unusual login times or locations in Microsoft 365 audit logs. A login from a country your team has never visited, or at 3am, is a clear indicator. Microsoft 365 records this in its sign-in logs, but most businesses never check them unless something prompts them to.
• Antivirus or security software that has quietly switched itself off. Some malware disables security tools as a first step. If your endpoint protection shows as inactive and nobody disabled it, that is a red flag.

What causes these problems in the first place

Understanding the cause is as useful as spotting the symptom, because the causes are preventable.

Phishing emails are the single most common entry point for attackers targeting small businesses. An email that looks like it comes from a supplier, a bank or Microsoft itself tricks a staff member into clicking a link or entering their password. Business email addresses are freely available online, so attackers do not need to target you specifically - they send thousands and wait for one to work.

Weak or reused passwords are a persistent problem. If a staff member uses the same password for their work Microsoft 365 account that they use for a personal website, and that personal site is breached, attackers will try those credentials against business systems automatically. This is called credential stuffing and it is largely automated.

Software that has not been updated is a frequent target. Microsoft patches security flaws in Windows and Office regularly. When those patches are not applied promptly, the vulnerabilities they fix remain open. Attackers actively scan for unpatched systems because they are the easiest ones to exploit.

No multi-factor authentication (MFA) on Microsoft 365 accounts means a stolen password is all an attacker needs. MFA adds a second check - typically a code sent to a phone - so a password alone is not enough. Enabling it on every account is one of the highest-impact single steps a business can take.

Poor backup discipline does not cause an attack, but it determines how badly one hurts you. If your last reliable backup is from three months ago and ransomware hits today, you lose three months of work. If backups run daily and are tested, recovery is painful but survivable.

Staff who have not been told what to look for are the most consistently exploited vulnerability. A brief, practical conversation about what phishing looks like and what to do if something seems wrong reduces risk more than almost any piece of software.

The controls that address these causes

A sensible cyber security setup for a Newmarket business running Windows and Microsoft 365 covers the following.

• Windows and Microsoft 365 updates applied promptly and consistently across all machines.
• Multi-factor authentication enabled on every Microsoft 365 account without exception.
• Endpoint protection (antivirus and anti-malware) active and monitored, not just installed and forgotten.
• Regular, tested backups of business data held separately from the main system - so ransomware encrypting your live files cannot reach the backup too.
• Controlled admin rights - staff should not run their day-to-day computers as administrators, because malware that runs under an admin account can do far more damage than malware running under a standard user account.
• Email filtering to reduce the volume of phishing messages that reach inboxes in the first place.
• Clear, simple guidance for staff on spotting suspicious emails and what to do when something looks wrong.

How our support contracts work

Our managed support contracts include security monitoring and updates as a standard part of the service. We offer two levels.

Business Essentials includes Windows updates, backups and security kept in check as part of the monthly fee. On-site visits are charged separately at a £60 call-out fee plus labour. Pricing per computer per month (excluding VAT): 1 computer £36, 2-3 computers £31.20 each, 4-9 computers £25.20 each, 10-17 computers £22.20 each, 18 or more computers £21.60 each.

Business Premium includes everything in Business Essentials with on-site labour and call-outs included in the monthly fee. Pricing per computer per month (excluding VAT): 1 computer £54, 2-3 computers £42 each, 4-6 computers £38.60 each, 7-9 computers £33.80 each, 10-12 computers £31.20 each, 13-15 computers £28.40 each, 16-19 computers £25.40 each, 20 or more computers £24.40 each.

Both contracts include response options to suit the business's needs. If a monthly contract does not suit you, we also offer pre-paid time blocks: 4 hours for £312, 8 hours for £592, or 16 hours for £1,123. A managed email service is available separately - ask for details and pricing.

What to ask any IT support provider about cyber security

If you are comparing providers, these are the questions worth putting to each one. How will you make sure Windows and Microsoft 365 updates are applied to all our machines? What happens if we get a ransomware attack - what is the recovery process and how current are our backups? How do you monitor for unusual account activity in Microsoft 365? Do you include endpoint protection in the contract or is it an add-on? What do staff need to do, and what do you handle for them?

Clear answers to these questions tell you whether a provider is actually managing your security or simply reacting when things go wrong.

Talk to us about cyber security for your Newmarket business

We have been supporting businesses from our base in Bury St Edmunds since 1990, covering Newmarket and neighbouring towns including Cambridge, Ely and Haverhill. Call us during office hours to talk through what you currently have in place and where the gaps might be.