Start Here: Find the Right Cyber Security Support
Cyber security can feel confusing when you are looking at Cyber Essentials, Microsoft 365, backups, EDR, email security, insurance questions and staff training at the same time.
You do not need everything at once. You need the right first step, based on what you need to protect, prove or recover from.
Find the right cyber security support without the fear or fluff.
Not every organisation needs the same cyber security setup. A small trades business chasing tender work has different needs from a school, a care provider, a charity or a parish council.
This page helps you choose a sensible first step, based on what you need to protect, prove or recover from.
You probably arrived here with one question.
“What should we do first?” That is the right question. Cyber security is easier to deal with when it is broken into practical steps: protect your accounts, back up your data, reduce the chance of ransomware, train your staff, and gather evidence for tenders, insurers, governors, trustees or clients.
What brought you here today?
Pick the route that sounds closest to your situation. You do not need to know the technical answer before you speak to us.
I need Cyber Essentials for a tender
You need the certificate, but you also want to avoid failed assessments, confusing scope questions and last-minute technical surprises.
Get Cyber Essentials certifiedCyber Essentials for UK trades
I’m worried about ransomware or downtime
You need to reduce the chance of an attack causing days of disruption, lost files, locked systems or painful recovery work.
Business continuity planningHuntress Managed EDR
Heimdal Next-Generation Antivirus
Heimdal Ransomware Encryption Protection
I need to protect Microsoft 365
You use Outlook, Teams, SharePoint or OneDrive and want better protection against account compromise, phishing and data loss.
Microsoft 365 securityHuntress ITDR
Microsoft 365 retention vs backup
I need answers for cyber insurance
Your insurer has asked about MFA, backups, EDR, patching, staff training or recovery evidence, and you are not sure what is already covered.
Cyber insurance readinessImmutable backups and cyber insurance
Huntress ITDR
I’m a school or multi-academy trust
You need to meet DfE cyber security standards, support RPA requirements, protect pupils and staff, and evidence sensible controls.
Cyber security for schools and MATsDfE cyber security standards support
I’m a care provider, charity or parish council
You handle sensitive information, often with limited time, budget and internal IT resource. You need practical controls that fit.
Cyber security for care homesCyber security for parish councils
The most common starting points
Most organisations come to us through one of these routes. Each one can stand alone, or become part of a wider cyber resilience plan.
1. Get the basics right
Good cyber security starts with the fundamentals: supported devices, secure settings, MFA, patching, safer passwords and clear ownership.
2. Protect Microsoft 365
Microsoft keeps the platform running, but you still need to protect accounts, email, files, Teams, SharePoint and recovery options.
3. Reduce ransomware risk
Ransomware resilience is not one tool. It means prevention, detection, response, backup, recovery and a plan for what happens next.
4. Evidence your security
Tenders, insurers, boards, governors and trustees increasingly expect proof. We help you turn security into evidence.
5. Support your people
People are part of the solution. Training works best when it is useful, human and blame-free.
6. Ask for a clear first step
If you are not sure what you need, start with a short conversation. We will help you prioritise, not overwhelm you.
What we usually recommend first
We do not usually start by selling the biggest package. We start by looking at what you already have, what you need to prove, what would hurt most if it failed, and what budget feels realistic.
| Situation | Sensible first step |
|---|---|
| You need a certificate for a tender or supply chain requirement. | Cyber Essentials, with help checking scope, devices, accounts and evidence. |
| You use Outlook, Teams, SharePoint and OneDrive every day. | Microsoft 365 security, Huntress ITDR and Microsoft 365 backup. |
| You are worried about account compromise or stolen logins. | Huntress ITDR, Microsoft 365 security hardening, MFA checks and phishing-resistant account protection. |
| You cannot afford days of downtime. | Business continuity planning, backup testing and managed endpoint protection. |
| You are worried about ransomware. | Huntress Managed EDR, Heimdal NGAV, Heimdal Ransomware Encryption Protection, Heimdal MXDR or a layered protection plan. |
| You are being asked cyber insurance questions. | Cyber insurance readiness, covering MFA, backup, EDR, ITDR, patching and staff training. |
| You do not know what you already have. | Cyber security health check or a short consultation to find the gaps. |
Who this is for, and who it is not for
Good cyber security support starts with fit. We are not the right choice for every organisation, and that is fine.
This is a good fit if you want…
- Plain English cyber security advice without scare tactics.
- A practical plan that fits your size, budget and risk.
- Help with Cyber Essentials, insurance, Microsoft 365, backup, identity protection or ransomware resilience.
- Support for small businesses, schools, care providers, charities, parish councils or professional services.
- A cyber-first partner who can work with your existing IT provider.
This may not be right if you want…
- A tick-box certificate with no interest in improving security.
- The cheapest tool regardless of whether it fits your risks.
- Enterprise-style consultancy when a practical first step would do.
- Fear-led messaging, blame-led staff training or fake urgency.
- A one-size-fits-all package with no discussion about your organisation.
Choose your route by organisation type
Cyber security feels easier when the advice matches how your organisation actually works.
Small businesses
For businesses that need practical protection without enterprise complexity.
Cyber security for small businessesTrades and contractors
For businesses that need to protect jobs, payments, mobile devices, emails and tender eligibility.
Cyber security for tradespeopleSchools and MATs
For education teams balancing safeguarding, compliance, budgets, staff workload and resilience.
Cyber security for schools and MATsCare providers
For care homes and domiciliary care providers handling sensitive resident, staff and service user data.
Cyber security for care homesProfessional services
For accountants, IFAs, conveyancers, consultants and other data-driven firms.
Cyber security for professional servicesCharities and parish councils
For organisations that need sensible protection, clear governance and good value.
Cyber security for charitiesUseful guides before you book a call
These pages answer common questions before we speak. They help you get more value from the first conversation.
Need Cyber Essentials?
Read this if you need certification for a tender, client requirement or cyber insurance discussion.
Cyber Essentials for UK tradesWorried Microsoft 365 is not backed up?
Read this if you rely on Exchange, OneDrive, SharePoint or Teams and want to understand retention vs backup.
Microsoft 365 retention vs backupWorried about ransomware?
Read this if downtime, locked files or recovery time would hurt your organisation.
Business continuity planningLooking at managed protection?
Read this if antivirus alone no longer feels enough and you want managed detection and response.
NGAV vs Managed EDR vs MXDRQuick answers
A few plain English answers before you start comparing tools, certificates and packages.
Where should a small business start with cyber security?
Start with what would hurt most. For many small businesses, that means protecting Microsoft 365 accounts, turning on MFA, keeping devices patched, backing up important data and working towards Cyber Essentials.
Do I need Cyber Essentials first?
If you need it for a tender, client requirement or supply chain opportunity, yes. If you do not need the certificate yet, it can still be a useful way to check the basics are in place.
Is Microsoft 365 backed up automatically?
Microsoft provides retention, recycle bins and service resilience, but that is not the same as having an independent backup and recovery plan for your organisation’s data.
What is the difference between antivirus, EDR, MDR and MXDR?
Antivirus usually focuses on blocking known threats. EDR looks more closely at endpoint behaviour. MDR adds managed human response. MXDR takes a wider view across more parts of your environment.
Where does Huntress ITDR fit?
Huntress ITDR is useful when you are worried about stolen logins, identity-based attacks and Microsoft 365 account compromise. It sits well alongside MFA, Microsoft 365 security hardening and user awareness training.
Where do Heimdal NGAV and Ransomware Encryption Protection fit?
Heimdal NGAV helps protect devices from malware and suspicious activity. Heimdal Ransomware Encryption Protection adds another layer aimed at spotting and stopping ransomware-style file encryption behaviour.
Can you work with our existing IT provider?
Yes. Many organisations already have IT support. We can work alongside them as a cyber-first partner, helping with risk, evidence, managed security, backup, awareness and compliance.
Do you only work in Chesterfield?
No. We are based in Chesterfield and support organisations across Derbyshire, Sheffield, South Yorkshire, Worksop, North Notts and wider UK locations where remote support is suitable.
Still not sure where to start?
That is normal. Cyber security can feel messy when you are looking at certificates, insurance forms, Microsoft 365, backups, EDR, ITDR, email protection and staff training at the same time.
We will help you find the first sensible step. No scare tactics. No enterprise sales pitch. No pressure to buy the biggest package.