Tagged: cyber-security
The backup password on the laptop you're backing up
Recovery controls fail in a way audits miss: the control quietly depends on the very thing it is meant to recover you from. We found five in our own systems in a week — here's the one question that finds them, and a two-hour fix.
Read → GuideIT and Cyber Security for Charities and Non-Profits in the UK
A plain-English guide to IT and cyber security for UK charities: protecting donor and beneficiary data, controlling volunteer access, and Cyber Essentials on a tight budget.
Read → GuideIT & Cyber Security for Solicitors and Law Firms: A Plain-English Guide
A practical guide to IT security for UK law firms: client confidentiality, SRA-aligned controls, secure email and documents, DMARC, backups and staying compliant.
Read → GuideIT Support for Recruitment Agencies in the UK
A plain-English guide to IT and cyber security for UK recruitment agencies: protecting candidate data, securing your CRM/ATS, mobile working and stopping placement invoice fraud.
Read → GuideCyber Essentials Explained: A Plain-English Guide for UK Small Businesses
What Cyber Essentials is, the five controls, CE vs CE Plus, why it wins contracts and helps insurance, and how a small UK business gets certified.
Read → GuideIT & Cyber Security for Veterinary Practices in the UK
A plain-English IT and cyber security guide for UK vets: protect client and pet data, keep practice software running, take payments safely, and stop phishing.
Read → ArticlePassword Managers Compared: The Best Choice for a UK Small Business
A plain-English guide to choosing a password manager for your UK small business: the key criteria that matter, the main options, and why we favour Proton Pass.
Read → GuideIT Support for Estate Agents in the UK
Practical IT and cyber security for UK estate agents: protecting client money and AML data, working safely with Rightmove and portals, stopping deposit and completion fraud, and mobile working.
Read → GuideWindows 10 End of Support: What Your Business Should Do Now
Windows 10 support ended on 14 October 2025. Here's what that really means for your business, your options, and how to plan the move without panic.
Read → GuideIT and Cyber Security for Financial Advisers in the UK
A practical guide to IT and cyber security for UK financial advisers and IFAs: meeting FCA expectations, protecting client financial data, secure email, backups and Cyber Essentials.
Read → GuideIT Security for Dental and Healthcare Practices: A Practical Guide
How UK dental and healthcare practices can protect patient data under UK GDPR and the NHS DSPT, keep clinical software running, back up safely and control access.
Read → ArticleAntivirus and Endpoint Protection for Small Businesses, Explained
What endpoint protection really is, how built-in Defender compares with paid tools, whether small firms need EDR, and what actually matters when protecting your devices.
Read → GuideIT Support for Nurseries and Childcare Settings in the UK
Plain-English IT and cyber security guidance for UK nurseries: protect children's and safeguarding data, control access, manage retention, and reassure parents.
Read → ArticleAI Tools at Work: The Real Security Risk Nobody Mentions
Staff are already using ChatGPT and other AI tools at work. The real danger isn't the robots — it's confidential data being pasted into public tools. Here's a sensible approach.
Read → GuideIT for Manufacturing and Engineering Firms in the UK
A plain-English IT and cyber security guide for UK manufacturers and engineers: keeping the shop floor running, protecting designs and IP, separating office and operational tech, and reliable backups.
Read → GuideIT Support for Care Homes in the UK: A Practical Security Guide
A plain-English guide to IT for UK care homes: protecting resident and staff data, CQC-aware information governance, reliable Wi-Fi and devices, and business continuity.
Read → GuideIT Support for Marketing and Creative Agencies in the UK
A plain-English IT and cyber security guide for UK marketing and creative agencies: protecting client data and assets, secure cloud collaboration, reliable backups and device security for a mobile team.
Read → ArticleHow to Stop Invoice Fraud and Email Spoofing (SPF, DKIM and DMARC)
How invoice and business email compromise fraud works, and how SPF, DKIM and DMARC stop criminals spoofing your domain. A plain-English guide for UK businesses.
Read → GuideIT Support for Gyms and Fitness Businesses in the UK
Plain-English IT guidance for UK gyms and fitness studios: protect member data and payments, run online booking, secure door-entry systems, and get reliable Wi-Fi.
Read → ArticleBest Business VPN Compared: A Plain-English Guide for UK Firms
What a business VPN is really for, the criteria that matter when choosing one, the main options, and why we favour Proton VPN for UK small businesses.
Read → ArticlePasswordless and Passkeys Explained (For Non-Techies)
Passkeys let you sign in with your face, fingerprint or PIN instead of a password — and they're far harder to steal. Here's what they are and how to start.
Read → ArticlePayroll Diversion Fraud Explained: How Criminals Redirect Staff Salaries
Payroll diversion fraud tricks your finance team into paying a staff salary to a criminal's bank account. Here's how it works and how to stop it.
Read → GuideHow to Set Up Multi-Factor Authentication (Step by Step)
A plain-English, step-by-step guide to turning on multi-factor authentication across your email, Microsoft 365 and key business apps — without the jargon.
Read → ArticleCloud Backup Services for Business Compared: How to Choose Well
How to choose a cloud backup service for your small business: the criteria that matter, why Microsoft 365 still needs backing up, and how to test that restores actually work.
Read → GuideHow to Set Up SPF, DKIM and DMARC: A Step-by-Step Guide
A plain-English, step-by-step guide to setting up SPF, DKIM and DMARC for your UK business email, with a safe staged rollout and common mistakes to avoid.
Read → ArticleRansomware and UK Small Businesses: How Firms Get Hit and How to Stop It
How a small UK business really gets hit by ransomware, and the handful of controls, backups, MFA, patching and staff awareness, that actually prevent it.
Read → ArticleAccount Takeover: How It Happens and How to Stop It
Account takeover is when a criminal logs into your account as you. Learn how it happens, the warning signs to watch for, and how to lock attackers out.
Read → ArticleHow to Securely Dispose of Old Computers and Data
Selling or scrapping an old work computer? Here's how to wipe data properly, when to destroy the drive, and how to recycle old kit legally — in plain English.
Read → PlaybookWhat to Do After a Cyber Attack: A First-Hours Playbook for Small Businesses
A calm, step-by-step playbook for the first hours after a cyber attack on your UK small business: contain, assess, report, recover and learn.
Read → ArticleGDPR Basics for UK Small Businesses: A Plain-English Guide
A jargon-free guide to UK GDPR for small businesses: what personal data is, lawful basis, ICO registration and fee, your security duty, and handling breaches.
Read → ArticleTech Support Scams and Fake IT Calls: How to Spot Them
Fake 'Microsoft' calls and scary pop-ups pressure you into handing over access or money. Learn the tells, what to do, and how a real IT provider behaves.
Read → ArticleThe Best Password Manager for a UK Small Business (And Why You Need One)
Why every UK small business needs a password manager, what to look for, and the privacy-first pick we use at Dacros. Plain-English guide, no jargon.
Read → ArticleHow to Check if Your Business Email Has Been Breached
Worried your work email has turned up in a data breach? Here's how to check for free, what to do if it has, and how to keep an eye on it going forward.
Read → ArticleHow to Report a Data Breach to the ICO: The 72-Hour Rule Explained
When a data breach is reportable, how the ICO's 72-hour rule works, what to include in your report and when to tell affected individuals. Plain-English UK guide.
Read → ArticleBusiness Email Compromise (BEC) Explained
Business email compromise costs UK firms dearly and slips past spam filters. Learn how CEO fraud and supplier impersonation work — and the layered defence that stops it.
Read → ArticleSmishing and Vishing: The SMS and Phone Scams Targeting Your Business
Smishing (text) and vishing (phone) scams are hitting UK businesses hard. Learn the warning signs, the common tricks and exactly how your team should respond.
Read → ArticleMulti-Factor Authentication (MFA) Explained for Small Businesses
Multi-factor authentication stops most account takeovers even when passwords leak. Learn app codes vs SMS vs passkeys, and how to roll MFA out.
Read → ArticleSIM Swapping Attacks Explained: Why Your Phone Number Isn't a Safe Login
Learn how SIM swapping hijacks your mobile number to beat SMS security codes, why app-based MFA is safer, and how to lock down your phone account.
Read → GuideIT and Cyber Security for Retail Shops: A UK Owner's Guide
A plain-English guide to IT and cyber security for UK retail shops: safer card payments, splitting till and guest Wi-Fi, staff logins and backups that actually work.
Read → ArticleQR Code Scams (Quishing) Explained: The Hidden Risk in a Square of Dots
Quishing means QR code phishing. Fake QR codes now appear on car parks, invoices and posters. Learn where they hide, why they slip past filters and how to stay safe.
Read → ArticleDo I Need a Business VPN? An Honest Guide for UK Firms
What a business VPN really is, what it is good for, what it is not, and when a UK small business actually needs one. Plain English, no scare tactics.
Read → ArticleHow to Spot a Phishing Email (and What to Do About It)
Learn to spot phishing emails fast: the classic tells, real-world patterns, and exactly what to do next — plus how to train your staff to catch them.
Read → ArticleHow to Switch IT Support Providers Without the Chaos
Leaving an underperforming IT company? A practical UK guide to getting your data, passwords and admin access back and running a clean, low-stress handover.
Read → ArticleBYOD for Small Businesses: The Risks of Personal Devices and a Sensible Policy
Letting staff use their own phones and laptops for work saves money but creates real risks. Here's a plain-English BYOD policy UK small businesses can actually use.
Read → ArticleInsider Threats for Small Business: The Risk From People You Already Trust
Understand accidental and malicious insider risk, and how least privilege, careful offboarding and sensible monitoring protect your small business.
Read → ArticleDeepfake and AI Voice Scams: When the Fake CEO Sounds Completely Real
AI can now clone a voice from seconds of audio. Learn how deepfake calls supercharge CEO fraud and BEC — and the simple call-back and code-word defences that stop them.
Read → GuideIT for Hospitality: A Practical Guide for UK Restaurants and Cafes
Practical IT for UK restaurants and cafes: cutting no-shows with online bookings, guest Wi-Fi done safely, taking card payments, and connectivity that keeps you trading.
Read → GuideBusiness Backups: The 3-2-1 Rule and Disaster Recovery
The 3-2-1 backup rule explained for UK small businesses: what to back up (including Microsoft 365), how to test restores, and recovering from ransomware.
Read → ArticleHow to Write a Password Policy for a Small Business (the Sensible Way)
An NCSC-aligned password policy for UK small businesses: length over complexity, no pointless forced changes, MFA everywhere and a password manager. A plain template.
Read → ArticleStaff Onboarding and Offboarding: Getting IT Access Right as People Join and Leave
Giving new staff the right access — and fully removing it when people leave — is a core security job. Here's how UK small businesses can do both cleanly.
Read → ArticleWhat Is Encryption? A Plain-English Guide for Business Owners
Encryption explained without the jargon: at rest vs in transit, HTTPS, device and disk encryption, encrypted email and storage, and why it matters for your business.
Read → ArticleCyber Security for a Small Ecommerce Business
How to protect a small UK online store: securing your platform and plugins, safe payments, customer data under UK GDPR, spotting fraud, and backups that actually restore.
Read → ArticleWhy You Should Move Your Business Off Free Gmail
Free consumer email quietly costs you trust, control and security. Here is why UK small businesses should move to a proper custom-domain email, and how.
Read → ArticleICO Fines and Enforcement: What Small Businesses Should Know
A plain-English guide to ICO enforcement for UK small businesses: reprimands vs fines, the real maximum penalties, and what actually triggers action.
Read → ArticleHow to Set Up Secure Business Wi-Fi: Guest and Staff Networks Done Right
A plain-English guide to secure business Wi-Fi for UK small firms: guest vs staff networks, WPA encryption, segmentation and the common mistakes to avoid.
Read → GuideMicrosoft 365 Security Settings Every Small Business Should Turn On
A plain-English guide to the Microsoft 365 security settings UK small businesses should enable: MFA, anti-phishing, Safe Links, audit logging and sharing controls.
Read → ArticleWorking From Home Securely: A Practical Guide for Small Businesses
Remote and hybrid work is here to stay. Here's how a small business can keep devices, logins, files and home Wi-Fi secure without a big IT budget or jargon.
Read → ArticleCloud vs On-Premise for Small Business: An Honest Comparison
An honest, jargon-free comparison of cloud vs on-premise IT for UK small businesses — the real trade-offs in cost, security, control and when each approach makes sense.
Read → ArticleLawful Basis for Processing Personal Data, Explained
The six lawful bases under UK GDPR in plain English for small businesses: how to choose one, and when to use consent versus legitimate interests.
Read → ArticleWhat Is a Firewall? A Plain-English Guide for Small Businesses
What a firewall actually does, the difference between router, software and next-gen firewalls, why it's a Cyber Essentials control, and how to set one up sensibly.
Read → ArticleCCTV and GDPR: Using Cameras Lawfully in Your Business
How to use CCTV lawfully under UK GDPR: signage, a clear purpose, sensible retention, handling footage requests, and what the ICO expects of you.
Read → ArticleMDR and EDR Explained: Do Small Businesses Really Need Them?
What managed detection and response (MDR) and EDR mean in plain English, why small firms are targeted too, whether you need 24/7 monitoring, and what to look for.
Read → ArticleZero Trust Security Explained for Small Businesses
Zero trust in plain English for UK small firms: what "never trust, always verify" means, and the practical steps (MFA, least privilege, device checks) you can take.
Read → ArticlePublic Wi-Fi Risks for Business Travellers (and How to Stay Safe)
The real risks of hotel, cafe and airport Wi-Fi for UK small businesses, plus simple ways to protect your data on the road — mobile hotspot, VPN and HTTPS.
Read → PlaybookCyber Essentials Self-Assessment Checklist: A Practical Pre-Assessment Guide
A plain-English Cyber Essentials checklist for UK small businesses. Work through all five controls before you apply so you pass first time, not on the retry.
Read → ArticleSecurity Awareness Training for Staff: Turning Your Team Into Your Best Defence
Why your staff are the front line against cyber attacks, and how short, regular, practical security awareness training builds a strong reporting culture.
Read → ArticleThird-Party and Supply-Chain Risk for Small Businesses
The suppliers and software you rely on can become your security problem. A plain-English guide to supply-chain risk for UK small firms, plus what to ask vendors.
Read → ArticleRemote Desktop (RDP) Security for Small Businesses
Exposed Remote Desktop is one of the top ways UK businesses get hit by ransomware. Here's why open RDP is dangerous and how to secure remote access properly.
Read → ArticleSecure File Sharing for Small Business: A Plain-English Guide
Emailing attachments and using consumer cloud apps quietly leaks business data. Here's what secure file sharing looks like, and how to get it right.
Read → ArticleCloud Storage for Business Compared: OneDrive, Google Drive, Dropbox and Privacy-First Options
Compare business cloud storage — OneDrive, Google Drive, Dropbox and privacy-first Proton Drive — on security, sharing, UK/EU data and the backup vs sync trap.
Read → ArticleHow Much Should a Small Business Spend on IT and Security?
A plain-English guide to setting an IT budget for your UK small business — what to spend, the categories that matter, and how to weigh value against cost.
Read → GuideHow to Secure Your Business Website: A Practical Guide
A plain-English guide to website security for UK small businesses: HTTPS, updates, strong logins with MFA, backups, a firewall/WAF, and getting a security review.
Read → ArticleScaling IT as Your Business Grows: From 5 to 50 People Without the Mess
How your IT needs change as you grow from a handful of staff to fifty, how to avoid the 'it just grew' mess, and when to bring in managed IT support.
Read → ArticleWhat Is 'the Cloud'? A Plain-English Guide for Small Businesses
A jargon-free explainer of what 'the cloud' actually means, the real benefits for small businesses, and the shared-responsibility catch you need to understand.
Read → ArticleZoom vs Teams vs Google Meet: Video Conferencing for Business Compared
Zoom, Microsoft Teams or Google Meet for your small business? Compare cost, call quality, security and privacy in plain English, and see which one to choose.
Read → ArticleDomain Names and DNS Basics for Business: A Plain-English Guide
A jargon-free guide to domain names and DNS for business owners — what A, MX and TXT records do, why they matter for your website and email security.
Read → ArticleCyber Insurance for UK Small Businesses: What It Covers and How to Avoid a Denied Claim
What cyber insurance actually covers, why UK insurers now check for MFA and DMARC, what to put in place first, and the common reasons small-business claims get denied.
Read → ArticleCyber Essentials vs Cyber Essentials Plus: Which One Does Your Business Need?
The plain-English difference between Cyber Essentials and Cyber Essentials Plus, which one you need, what the audit involves, the cost and effort, and the 2026 MFA change.
Read → PlaybookThe 30-Day Small Business Security Hardening Playbook
A plain-English, week-by-week 30-day plan any UK small-business owner can follow to lock down MFA, backups, email, passwords and updates.
Read → GuideThe UK Small Business Cyber Security Starter Guide
A complete beginner's guide to cyber security for UK small businesses: the real threats, the controls that matter, Cyber Essentials, and where to get help.
Read → ArticleThe IT Support Checklist for UK Accountancy Practices
A practical IT and cyber-security checklist for UK accountants: protecting client data, staying online through tax season, and meeting Cyber Essentials.
Read →