Managed Cyber Security
Cyber security services for business
Protect your business. Know where you stand. Have people to turn to.
Cyber security solutions that work together, from Microsoft 365 security and 24/7 monitoring and response to vulnerability management, Cyber Essentials certification and ISO 27001 compliance. Choose the support your business needs, with named security specialists helping you understand the risks and next steps.
Which security service do I need?
Start with what your business needs to achieve. These services address different parts of cyber security and can work together. The table below helps you find a starting point before exploring each service in more detail.
| If this sounds like your business... | Start here |
|---|---|
| We use Microsoft 365, but do not know whether it is properly secured. | Microsoft 365 SecurityOngoing management of access, security settings and data sharing, with clear reporting and improvement priorities. |
| Who would spot and investigate suspicious activity outside office hours? | 24/7 Cyber Security Monitoring & ResponseContinuous monitoring, threat investigation and incident response coordination across your managed security environment. |
| We need to understand our vulnerabilities, fix what matters and demonstrate progress. | Cyber Assurance & Vulnerability ManagementVulnerability scanning, credential exposure monitoring and guided remediation, with testing and assurance appropriate to your programme. |
| A tender, customer or insurer requires Cyber Essentials certification. | Cyber Essentials CertificationAssessor-led support for Cyber Essentials and Cyber Essentials Plus, with a choice of support levels. |
| A contract depends on ISO 27001, and we need help achieving and maintaining it. | Compliance: Managed ISO 27001A consultant-led programme covering your management system, evidence, independent internal audit and external auditor coordination. |
You do not need to choose alone. Tell us what is driving the requirement and how your IT is currently supported. We can help you choose the services you need, whether they work alongside your internal team, an existing provider or our managed IT support.
Talk to a security expertSecure your everyday working environment
Microsoft 365 Security
Microsoft 365 provides security tools, but someone still needs to manage them. We govern access, security policies and data sharing, identify configuration changes and prioritise improvements. Monthly reporting and quarterly reviews give your leadership team a clear view of progress, while Copilot readiness reviews help identify permissions and data exposure risks before wider AI adoption.
A good starting point if: your business relies on Microsoft 365 and needs confidence that its security is actively managed. This is ongoing governance; 24/7 threat investigation and response is a separate service.
Explore Microsoft 365 SecurityKnow when something needs a response
24/7 Cyber Security Monitoring & Response
Security alerts need investigation, not just collection. Our managed monitoring and response service brings together endpoint, email, identity and Microsoft 365 threat visibility, with 24/7 security operations to review alerts, investigate suspicious activity and coordinate response. Named security specialists provide the link between your business and the security operations centre, with monthly reporting to explain events, actions and recommendations.
A good starting point if: you need monitoring and response capability without building an internal security operations centre, or want specialist support alongside your IT team. Major incident remediation and recovery projects are separately scoped where required.
Explore monitoring & responseFind the gaps. Focus the fixes. Show progress.
Cyber Assurance & Vulnerability Management
Understand where your business is exposed and what needs attention first. Our cyber assurance programme combines monthly external vulnerability scanning, dark web credential monitoring and guided remediation with clear reporting and quarterly reviews. For businesses needing higher assurance, the Plus programme adds quarterly penetration testing and specialist review, helping validate controls and track improvement over time.
A good starting point if: your leadership team needs clearer evidence of security improvement, or your clients and insurers are asking about vulnerabilities and controls. This provides ongoing assurance; 24/7 threat monitoring and response is delivered separately.
Explore cyber assuranceGet the certification your business needs
Cyber Essentials Certification
When a tender, customer or insurer asks for Cyber Essentials, you need a clear route to certification. Our qualified assessors support both Cyber Essentials and Cyber Essentials Plus, with levels of help ranging from a straightforward certification route to guided assessment support and the combined CE and CE Plus programme. You retain responsibility for technical remediation, while we provide guidance appropriate to your chosen service.
A good starting point if: you need recognised certification for a contract or assurance requirement. Certification depends on meeting the scheme requirements at assessment; ongoing vulnerability management is available through the separate cyber assurance programme.
Explore Cyber Essentials certificationTurn compliance into a business advantage
Compliance: Managed ISO 27001
If contracts depend on ISO 27001, your business needs more than a set of policy documents. Our managed compliance service combines a dedicated consultant, the Adoptech platform, an independent internal audit and external auditor coordination. Your team builds ownership of its information security management system, with quarterly reviews and ongoing monitoring helping keep it active and audit-ready after certification.
A good starting point if: you need ISO 27001 to satisfy procurement requirements but do not have an internal compliance function. Available standalone or alongside managed IT support. Your team completes assigned actions; the independent external certification audit is separately charged.
Explore managed ISO 27001 complianceAdditional protection for your people
Available separately alongside your chosen security services.
Cyber Security Awareness Training
Help your employees recognise suspicious messages and make safer everyday decisions, reinforcing the protection provided by your security services.
Business Password Management
Help your team create, store and share business credentials securely, supporting better password practices across your business.
Different services. One coordinated approach.
Good cyber security for business needs clear responsibilities. Governance maintains your controls, monitoring investigates threats, assurance identifies exposure and certification provides evidence against a recognised standard. As your managed security services provider, we help you choose the right combination without treating every requirement as the same problem.
Clear ownership
Know which service manages policies, which investigates alerts and which supports compliance. Our named security team helps connect the work with your business and coordinate with your existing IT arrangements.
Reporting you can use
Understand the risks, actions and improvements relevant to the services you take. Reporting and reviews follow each programme's scope, giving leadership clearer evidence rather than expecting you to interpret a collection of technical alerts.
Support that fits
Start with the requirement driving your decision and add services where they are needed. We can work alongside your internal IT team or existing provider, or as part of a wider managed IT relationship.
You do not have to take everything. Security services are separately selected and scoped. We will explain what each covers, where responsibilities meet and whether a requirement needs additional project work, so you can make an informed choice.
Talk to a security expertSecurity that supports the way you work
Client feedback on our wider IT and security partnership.
“As our business grew, we needed an IT infrastructure that could keep pace with our increasing data demands and stringent security requirements.
Your IT Department delivered a solution that has significantly improved system performance and security, allowing our engineers to focus on innovation without IT limitations.”
“We really value the balance - strong security without any unnecessary restrictions”
Meet the people behind your cyber security
Cyber security needs specialist knowledge and people who understand how a business works. Fern and Narayan combine practical IT support experience with security and compliance expertise, helping you understand findings, agree priorities and coordinate with the teams delivering your chosen services.
Narayan Dosanjh and Fern Ritchie, Your IT Department security team.
Narayan Dosanjh
Security and compliance team
Narayan brings nearly eight years of hands-on IT experience, progressing from a service desk apprenticeship through Tier 2 support before specialising in cyber security. His background gives him a practical understanding of the challenges involved in implementing controls.
His work includes security audits, gap analysis, remediation planning and Cyber Essentials assessments. He holds Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), and helps translate technical findings into clear next steps.
- Security, Compliance, and Identity Fundamentals (SC-900)
- Practical IT operations experience
- Security audits and remediation planning
Fern Ritchie
Team Leader, Senior Security & Compliance Engineer
Fern leads our security and compliance team. She joined Your IT as an apprentice in 2019 and completed her Level 3 Infrastructure Technician Apprenticeship in 2022 before specialising in cyber security. Her experience connects everyday IT operations with the security controls businesses need.
She holds CompTIA Security+, a first-class Applied Cyber Security degree, the Cyber Essentials Assessors Certificate and Microsoft 365 Certified: Endpoint Administrator Associate (MD-102). She helps connect security findings and improvement priorities with your business.
- Microsoft 365 Endpoint Administrator Associate (MD-102)
- CompTIA Security+
- Applied Cyber Security degree, First Class
Your named security team works alongside the specialists delivering each service. The 24/7 security operations centre provides round-the-clock monitoring for that service; compliance consultants and independent auditors have their own defined roles. We explain responsibilities as part of your agreed scope.
Talk to a security expert
Tell us what is driving your security requirements and how your IT is currently supported. We will help you identify the right next step.
Talk to a security expertSecurity support that fits your business
You do not need to replace your entire IT setup to get specialist cyber security support. Our services can work alongside your existing arrangements, whether you need ongoing protection, clearer assurance or help meeting a certification requirement.
| Your situation | How we can help |
|---|---|
| You do not have an internal IT team | Access specialist security capabilities without building an internal security operations or compliance function. Choose the services your business needs, separately or alongside managed IT support. |
| You have an internal IT team | Add security governance, monitoring, investigation or assurance expertise while your team retains its role and ownership of the environment. Responsibilities are agreed as part of the service scope. |
| You already have an IT provider | Bring in specialist support for a defined security or compliance requirement. We can coordinate findings and agreed actions with your existing provider without requiring you to switch IT support. |
| A client, tender, insurer or board needs evidence | Identify the right route for your requirement, from Cyber Essentials and ISO 27001 certification support to ongoing governance, risk reporting and vulnerability assurance. |
The right scope matters more than a one-size-fits-all package. Tell us about your current systems, support arrangements and the requirement driving your enquiry. We will discuss which services fit and where any additional work needs separate scoping.
Talk to a security expertFrequently Asked Questions
Let’s answer some of your frequently asked questions about Cyber Essentials and vulnerability management.
What exactly does cyber security do?
Cyber security helps protect your business’s systems, accounts and information from unauthorised access, misuse and disruption. It combines technical controls, people and processes to reduce risk, identify suspicious activity and respond when something goes wrong. For a business, that means protecting day-to-day operations as well as customer data and access to important systems.
What are the seven types of cyber security?
There is no single universally agreed list, but seven useful areas are network security, endpoint security, application security, cloud security, information security, identity and access security, and security operations and incident response. They overlap: protecting Microsoft 365, for example, involves cloud settings, user permissions, data sharing and threat monitoring. Your business needs the right combination, not necessarily seven separate products.
Which cyber security services does our business need?
Start with the requirement driving your enquiry. Microsoft 365 Security manages settings, access and governance; 24/7 Monitoring & Response investigates threats; Cyber Assurance identifies vulnerabilities and tracks improvement. Cyber Essentials and ISO 27001 services support specific certification needs. These services can work together, and we can help you choose without assuming you need every service.
What does a managed security services provider do?
A managed security services provider takes responsibility for agreed security activities on an ongoing basis. Depending on the service, these can include managing controls, monitoring alerts, investigating suspicious activity, coordinating response and reporting on risks and improvements. The important questions are what is covered, who acts on findings and where your responsibilities begin and end.
Can you work with our existing IT team or provider?
Yes. You can add specialist security support without replacing your current IT arrangements. We agree responsibilities and coordinate relevant findings and actions with your internal team or provider. Services can also be combined with our managed IT support where that suits your business.
Is cyber security included in our IT support contract?
IT support and dedicated security services have different scopes. Our cyber security services are separately selected, rather than automatically included in every IT support contract. We explain what each service covers, any licensing requirements and whether additional remediation or recovery work needs separate scoping.
Does Cyber Essentials certification mean we are fully secure?
No. Certification demonstrates that the requirements of the scheme were met at assessment; it is not a guarantee against cyber attacks. Ongoing governance, vulnerability management and threat monitoring address different needs and can support your business beyond certification.
Can you guarantee that we will not suffer a cyber attack?
No provider can remove every cyber risk. Appropriate controls, active monitoring and a coordinated response help strengthen your position, but they do not guarantee that an incident will never happen. We focus on clear responsibilities, practical improvements and an honest explanation of the protection each service provides.
Not sure where to start? Talk to a security expert.
Tell us what is driving your security requirements, what you already have in place and how your IT is supported. Our team will help you identify the right next step, whether you need ongoing protection, clearer assurance or certification support.
You do not need to choose a package before getting in touch.
