Cyber Security for Business in Soham

What cyber security for business involves

Cyber security for a small business is not one product - it is a combination of controls that reduce the risk of your data being accessed, stolen or held to ransom. For businesses running Windows PCs, laptops and Microsoft 365, the key controls are: multi-factor authentication on all accounts, managed patching of Windows and Office software, properly configured email filtering, monitored backups stored away from your live data, and sensible account permissions so staff can only access what they need.

Getting these controls in place before a problem occurs is far cheaper and less disruptive than dealing with the aftermath. A ransomware attack on a five-person business can mean days of downtime, data loss and - depending on what customer information was held - a legal obligation to notify the Information Commissioner's Office.

Repair or replace - the question every business eventually faces

After a security incident, or when reviewing an ageing IT setup, the repair-versus-replace decision comes up constantly. It is rarely black and white, but there are clear principles that help you make the right call for your business.

When repairing makes sense

If your systems have been running well and the incident was a contained one - a single phishing email that was caught before credentials were used, for example, or a failed malware installation that your endpoint protection blocked - then repair is usually the right answer. The work involved is: confirm the threat is fully removed, review and tighten the settings that allowed it to get as far as it did, and check that backups are intact and current. That is not a full system overhaul; it is targeted remediation.

Repair also makes sense when the underlying platform is sound but not properly configured. Microsoft 365, for instance, ships with a significant number of security settings switched off by default. A business that has been using 365 for three years without ever reviewing those settings may have real exposure - legacy authentication protocols enabled, external sharing open on SharePoint, admin accounts without multi-factor authentication. Fixing those settings is repair work, not replacement, and it is worth doing before reaching for something new.

Windows PCs that are in-support (still receiving Microsoft security updates) and functioning correctly can continue to serve you well with the right managed patching and monitoring in place. Replacing hardware that is otherwise sound simply because a security review found configuration gaps is unnecessary expenditure.

When replacement is the better decision

There are situations where replacement is clearly right. If a PC is running Windows 10 beyond its October 2025 end-of-support date and cannot be upgraded to Windows 11, it will stop receiving security patches from Microsoft. Running an unpatched operating system on a business network is a significant and ongoing risk - no amount of monitoring around the edges compensates for an OS that is no longer being fixed. Replacing that machine is not optional if you want a defensible security posture.

Replacement is also appropriate after a serious breach where the integrity of the system cannot be confidently confirmed. If a device has been subject to a sophisticated attack and there is any doubt about whether malware persists - particularly rootkits or firmware-level threats - a full rebuild from clean media, or hardware replacement, is the safer path. Attempting to clean a severely compromised system and returning it to production carries real risk.

Where Microsoft 365 tenants have been seriously compromised - admin accounts taken over, mail forwarding rules set by an attacker, OAuth app permissions granted to malicious third-party apps - a thorough audit of the tenant is essential. In extreme cases, migrating to a fresh tenant is the cleanest solution, though it is disruptive. In most cases, a systematic review and remediation of the existing tenant is sufficient.

The honest middle ground

Most small businesses fall somewhere in between. Their systems have not been breached, but their security controls are thin and their setup has drifted over time - old user accounts that were never removed, shared passwords, no multi-factor authentication, backups that have not been checked in months. This is not a repair-or-replace situation; it is a hardening exercise. The platform stays, but the configuration is brought up to a proper standard.

A straightforward security audit of your Windows environment and Microsoft 365 tenant will show you exactly where you stand. From that baseline, you can make informed decisions about what genuinely needs replacing and what simply needs fixing.

What our service covers

We work exclusively with Windows PCs, laptops and Microsoft 365. Our cyber security work covers the controls that matter most to small businesses:

• Managed Windows updates and security patching across your devices
• Microsoft 365 security configuration - multi-factor authentication, email filtering, sharing controls and admin security settings
• Monitored backups with genuine recovery testing - not just a backup job that runs unobserved
• Endpoint protection management
• Incident response support during office hours
• Practical guidance to reduce human error - which remains the most common cause of breaches
• Managed email service available

What does it cost?

Our contracts are billed per computer per month (prices exclude VAT). There are two plans.

Business Essentials covers unlimited remote and phone support, updates, backups and security monitoring. On-site visits are charged separately at a £60 call-out fee plus labour:

• 1 computer: £36/month
• 2 to 3 computers: £31.20 each/month
• 4 to 9 computers: £25.20 each/month
• 10 to 17 computers: £22.20 each/month
• 18 or more computers: £21.60 each/month

Business Premium includes everything in Essentials, with on-site labour and call-outs included in the monthly price:

• 1 computer: £54/month
• 2 to 3 computers: £42 each/month
• 4 to 6 computers: £38.60 each/month
• 7 to 9 computers: £33.80 each/month
• 10 to 12 computers: £31.20 each/month
• 13 to 15 computers: £28.40 each/month
• 16 to 19 computers: £25.40 each/month
• 20 or more computers: £24.40 each/month

If a monthly contract does not suit you, prepaid time blocks are available: 4 hours for £312, 8 hours for £592, or 16 hours for £1,123 (all ex VAT). Each block includes monthly monitoring and priority service and is valid for up to six months.

Serving Soham and the surrounding area from Bury St Edmunds

Whether you are reviewing your current setup after an incident or simply want to get proper controls in place before something happens, call us to discuss what your business actually needs - and whether repair, replacement or a configuration review is the right starting point.