Blog

Cybersecurity for small teams

The security basics a small team can set up itself, the scams that actually hit small teams, and what to do in the first hour when something goes wrong.

The article title in white on a ribbed-glass panel over a photo, with a map and location pins Guide9 min read Free cybersecurity help in the UK and France: Cyber Essentials, NCSC, 17Cyber, MonAideCyber Free cyber security help for small business in the UK and France: NCSC tools, Report Fraud, 17Cyber, MonAideCyber, and why Cyber Essentials is not free. The title “NIS2: does it apply to your company, and what will your clients ask?” in white on a ribbed-glass panel over a photo, with a map marked with location pins Guide9 min read NIS2: does it apply to your company, and what will your clients ask? NIS2 and small businesses: the size and sector tests, where France and the UK stand in October 2026, and the security questions your clients will send. The title ‘A big client sent you a security questionnaire? How a small team answers it’ in white on a ribbed-glass panel over a photo, with a blueprint grid and a target Guide9 min read A big client sent you a security questionnaire? How a small team answers it Got a vendor security questionnaire from a large client? The questions small teams always face, how to answer no honestly, and a trust pack to reuse. The article title in white on a ribbed-glass panel over a photo, with a shield bearing a check mark Guide9 min read Cyber insurance: what it covers and when it’s worth it for a small team Cyber insurance for small business, explained: what policies cover, the exclusions that catch people out, what insurers ask and when it is worth buying. The article title in white on a ribbed-glass panel over a photo, with a shield and a check mark Guide13 min read Hacked email, ransomware or bank fraud: the first-hour plan for a small team What to do after a cyber attack: the first-hour plan for a hacked mailbox, ransomware, payment fraud or a stolen laptop, and who to call in the UK and France. The article title in white on a ribbed-glass panel over a photo, with a shield and a check mark Guide10 min read Laptops and phones without an IT department: the security basics A laptop security checklist for small business teams with no IT department: updates, encryption, screen lock, Windows 10, phones, BYOD and lost devices. The article title in white on a ribbed-glass panel over a photo, with connected boxes in a flow diagram Tutorial9 min read Offboarding checklist: close every access when an employee or freelancer leaves Employee offboarding checklist for IT: what to close before, on and after the last day (email, files, passwords, domain, devices), freelancers included. The article title in white on a ribbed-glass panel over a photo, with a browser window showing a page layout Tutorial12 min read Secure Google Workspace and Microsoft 365: the admin settings that matter The Google Workspace security settings to change first, and their Microsoft 365 equivalents: admin accounts, phishing filters, forwarding, sharing and alerts. The article title in white on a ribbed-glass panel over a photo, with a blueprint grid and a target Guide10 min read Backups for a small team: the 3-2-1 rule for your files, Google Workspace and Microsoft 365 The 3-2-1 backup rule for small business: what Google Workspace and Microsoft 365 really keep, laptop backups, the offline copy and a quarterly restore test. The article title in white on a ribbed-glass panel over a photo, with a megaphone and sound waves Guide9 min read AI voice clones and deepfake calls: the new CEO fraud, and how to protect your team Deepfake CEO fraud uses a cloned voice or a fake video call to rush a payment. Real cases, why spotting fakes fails, and the simple rules that stop it. The title in white on a ribbed-glass panel over a photo of stacked envelopes with a notification badge Guide10 min read Fake invoices and “new bank details” emails: how to spot and stop payment fraud Invoice fraud often starts with a “new bank details” email. The red flags, five rules that stop it, what your bank now checks and what to do if you have paid. The article title in white on a ribbed-glass panel over a photo, with a padlock Tutorial11 min read Two-factor authentication and passkeys: switch them on everywhere in one afternoon How to set up two-factor authentication and passkeys on your email, domain, bank and payment accounts in one afternoon, then enforce 2FA for the whole team. The title Password managers for teams: Bitwarden vs 1Password vs Proton Pass in white on a ribbed-glass panel over a photo, with two panels side by side and an orange vs badge Comparison11 min read Password managers for teams: Bitwarden vs 1Password vs Proton Pass Best password manager for small business? Bitwarden, 1Password and Proton Pass compared: October 2026 prices, admin recovery, offboarding and who each suits.

You do not need an IT department to be hard to attack. A password manager, two-factor authentication, tested backups, a rule for any change of bank details and a one-page incident plan stop most of what hits small teams. These guides cover each of them step by step, with the official guidance from the NCSC and the ANSSI, and the obligations that may reach you through your clients.

Let’s build what comes next.

A website, a ranking or a full calendar: tell us where you want to be, and we reply within forty-eight hours with a clear plan.

Discuss your project
Contact Start a project
Write to us