Our Approach: The 7 Layers of Cyber Security
Defence-in-depth greatly lowers the risk of cyber threats stealing your data and bringing down your business.
The 7 layers of cyber security
Cyber security is not one product, one licence or one quick fix. It is a set of sensible layers working together, so your people, devices, data and business-critical systems are harder to attack and easier to recover.
We help small businesses, schools, care providers and local organisations build protection that fits their size, budget and compliance requirements — without turning cyber security into a full-time job.
Most cyber gaps are not caused by one missing tool.
They usually appear between tools, people and processes. A firewall might be in place, but staff are still exposed to phishing. Antivirus might be installed, but nobody is watching suspicious behaviour. Backups might exist, but nobody has checked whether they can be restored quickly.
A layered approach gives you backup plans.
If a phishing email gets through, training helps someone spot it. If someone clicks, identity protection and email security reduce the damage. If malware runs, endpoint protection and monitoring can respond. If files are lost, backup gives you a route back.
You do not need everything on day one.
The point is not to buy every security product available. The point is to understand the layers, identify the weak spots, then improve them in a sensible order.
For organisations that want practical protection, not vendor noise.
This page is for owners, school leaders, practice managers, trustees, finance teams and internal IT staff who need a clear way to think about cyber security.
This is for you if...
- You are being asked about cyber security by insurers, clients, auditors or suppliers.
- You have some tools in place, but you are not sure whether the gaps are covered.
- You want a realistic plan that fits your budget and risk.
- You need someone to explain what matters first.
This is not for you if...
- You want a tick-box product with no ongoing review.
- You believe antivirus alone is enough for modern cyber threats.
- You want to buy tools without checking how they will be managed.
- You are looking for scare tactics rather than clear advice.
What each layer does
Each layer has a different job. Some help prevent attacks. Some help detect unusual behaviour. Some help you recover when something goes wrong. The strongest setups combine all three.
Human layer
Many attacks start with a login, a convincing email or a rushed decision. This layer helps your team recognise risk without blaming them for every threat.
Perimeter layer
This layer helps block dangerous traffic, suspicious websites, malicious links and phishing attempts before they reach your people or systems.
Network layer
Your network layer helps reduce exposure across connected devices, remote access, cloud services and internal systems. It also helps spot activity that does not look right.
Endpoint layer
Endpoints are often where work happens, so they are often where attacks land. This layer helps protect devices from malware, ransomware and suspicious activity.
Application layer
Out-of-date software creates easy routes in. This layer focuses on patching, reducing known weaknesses and keeping applications under better control.
Data layer
This layer protects the information your organisation depends on: client records, pupil data, care records, financial files, emails and business documents.
Mission critical layer
This is the “can we keep going?” layer. It covers backup, recovery, identity monitoring, incident response and the practical steps that reduce downtime.
Managed support
Tools only help if they are chosen properly, configured properly and reviewed properly. That is where our Chesterfield-based team comes in.
Why this matters for small organisations
Smaller teams are often expected to meet the same security expectations as larger organisations, but without the same time, budget or internal cyber team. A layered approach helps you make better decisions without wasting money on the wrong first step.
Cyber insurance
Insurers may ask about MFA, backups, patching, EDR, staff training and recovery evidence.
Explore cyber insurance support →Cyber Essentials
The five controls are a strong foundation, but they work best as part of a wider plan.
Get Cyber Essentials certified →SMB1001
A practical route for small organisations that want proportionate cyber assurance.
Read about SMB1001 →Cyber resilience
Security reduces the chance of an incident. Resilience helps you keep going when something happens.
Build resilience →A clearer way to build your cyber security layers
We do not start by throwing products at the problem. We start by understanding what you already have, what you are being asked to prove, and where the real gaps sit.
Review
We look at your current setup, risks, users, devices, Microsoft 365, backups and compliance pressures.
Prioritise
We separate urgent gaps from nice-to-have improvements, so you know what matters first.
Protect
We help put the right tools, training and monitoring in place across the relevant layers.
Support
We keep things reviewed, updated and aligned with your organisation as it changes.
Our layered model is part of a wider way of thinking about cyber risk. Read more about the Black Swan Approach to cyber security.
Go deeper into the areas that matter most
These pages explain the individual layers in more detail, from email protection and identity monitoring through to backup, recovery and 24/7 detection.
Email layer
Stop phishing, impersonation and malicious links before they reach inboxes.
View email security →Identity layer
Detect suspicious logins, account takeover and unusual Microsoft 365 behaviour.
View Huntress ITDR →Endpoint layer
Protect laptops, desktops and servers from malware and unauthorised activity.
View NGAV →Ransomware layer
Detect and stop ransomware encryption before files are locked.
View ransomware protection →Recovery layer
Recover emails, files, servers and devices if something is deleted, lost or compromised.
View cloud backup →Detection and response
Continuous monitoring and response when unusual activity is detected.
View MXDR →Layered cyber security FAQs
Why is one cyber security product not enough?
Different attacks target different weak spots. Some target people through email. Some target logins. Some target out-of-date software. Some target devices. One product might help with one area, but it will not cover every route an attacker might use.
Do we need all 7 layers straight away?
Not always. Most organisations need a sensible starting point. We usually look at your current setup, your risk, your compliance requirements and your budget, then build from there.
Is antivirus still important?
Yes, but it should not sit on its own. Modern protection usually includes endpoint protection, patching, DNS protection, identity monitoring, staff training, backups and managed response.
How does this help with cyber insurance?
Cyber insurance forms often ask about controls that sit across several layers, including MFA, backups, patching, EDR, email security and staff training. A layered approach helps you answer those questions with more confidence and better evidence.
Can Black Swan manage this for us?
Yes. We help organisations choose, configure and support the right layers, rather than leaving you to stitch together products on your own.
Not sure which cyber security layers you already have covered?
We can help you spot the gaps, prioritise the quick wins and build a realistic plan that fits your organisation.
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.
Stay ahead of cyber threats - Subscribe to the Black Swan newsletter
Protect your school or business with expert advice tailored to schools and small businesses. Get the latest cyber threat insights, practical data protection tips, and guidance on password security, ransomware prevention, and compliance – all delivered straight to your inbox.
Join the Black Swan community today and take charge of your cyber security.
Click here to preview an example newsletter and see what you’ll gain by subscribing!