Got a cyber security question?
Whether you’re a school business manager, nursery owner, care provider, tradesperson or small business owner, ask your question and I’ll do my best to answer it.
No jargon. No scare tactics. Just practical advice based on 20+ years working in IT and cyber security.
Cyber security questions answered in plain English
Got a question about cyber security, Cyber Essentials, Microsoft 365, backups, ransomware, schools, care providers or small business security?
Ask me directly. I’ll give you a straight answer based on nearly 30 years working in IT and cyber security.
Why ask Kevin?
Most cyber security websites tell you what their products do. That is not always what people need.
Sometimes you just want an honest answer from somebody who has seen the real-world problems organisations face every day.
I’ve worked with schools, charities, parish councils, care providers, tradespeople and small businesses. I’ve helped organisations prepare for audits, improve cyber resilience, work towards Cyber Essentials and make better decisions about security.
If there is a simple answer, I’ll tell you. If there is not, I’ll explain why.
Quick answers
A few of the questions I get asked most often.
Are we too small to be a target?
No. Many cyber criminals target smaller organisations because they often have fewer security controls and less dedicated IT support. The aim is usually to find the easiest route in, not the biggest organisation.
Is Microsoft Defender good enough?
Microsoft Defender can provide strong protection, especially with the right Microsoft 365 licence. The bigger question is whether someone is monitoring alerts, investigating suspicious activity and responding when something looks wrong.
Do I need Cyber Essentials?
Not every organisation needs Cyber Essentials, but many tenders, supply chains and insurance policies now expect evidence of basic cyber security controls. It is often a sensible starting point.
What is the biggest mistake businesses make?
Waiting until something forces action. Many organisations only deal with cyber security after a tender, audit, insurance question or incident makes it urgent.
What matters more: antivirus or backups?
Both matter, but tested backups are vital. Security tools reduce risk. Backups help you recover when something slips through.
How often should staff complete cyber training?
At least annually, supported by shorter reminders during the year. Cyber security awareness works best when it becomes part of normal working life.
Topics you can ask about
You can ask about practical cyber security questions, especially where security, compliance and real-world business pressure overlap.
Cyber Essentials
Certification, questionnaires, audits, devices in scope and contract requirements.
Schools
DfE cyber security standards, RPA requirements, filtering and monitoring and cyber resilience.
Microsoft 365
MFA, account compromise, email security, backup and Microsoft 365 protection.
Backups
Microsoft 365 backup, immutable backup, ransomware recovery and disaster recovery planning.
Email security
Phishing, business email compromise, DMARC, spoofing and suspicious messages.
Managed detection and response
Huntress, Heimdal, EDR, MDR, MXDR and endpoint protection for smaller organisations.
Recent answers
Every good question helps someone else. Selected questions may be answered on this page or turned into future articles.
Cyber insurance can help with the financial impact of an incident. It does not prevent one. Car insurance does not stop an accident, and cyber insurance does not stop ransomware, phishing or account compromise.
Insurers increasingly expect organisations to have basic controls in place, including MFA, patching, backups, anti-malware and security awareness training. Insurance should sit alongside cyber security, not replace it.
Ask your question
Have a cyber security question? Send it in below and I’ll do my best to answer it.
Questions from schools, care providers, charities, parish councils, trades and small businesses are especially welcome.
About Kevin Walker
I’m the founder of Black Swan Cyber Security Solutions and have spent over 30 years working in IT.
I’ve supported schools for almost two decades and now help organisations reduce cyber risk without unnecessary complexity, jargon or scare tactics.
My approach is simple: explain what matters, ignore what does not, and help people make informed decisions.
You can also read more about Black Swan Cyber Security Solutions or contact us directly.
