Reviews
Security compliance training controls: general guidance
Security compliance training controls: what HIPAA, PCI DSS, ISO 27001 and CMMC require, the cadence and records to keep, and the checks that show they work.
Desk
Method Desk
The mechanics of cybersecurity protection basics, explained without assuming prior knowledge.
Industry
Cloud security comparison: the parts worth your attention
Cloud arrangements compared by where responsibility sits: hosted software or rented machines, native or added tooling, one provider or several, and what never moves.
Guides
Security foundations controls: signal versus noise
Security foundations controls written so they can be checked: configured against effective, coverage as a fraction, exceptions with expiry dates, and ownership.
Rules
Security foundations compared: prevention, detection and recovery
Security foundations compared by approach rather than product: prevention against recovery, in-house against managed, and what you own against something new.
Reviews
Network security troubleshooting: first principles
Ten common office network faults after segmentation, each with the first check, the likely cause, the fix that keeps the protection and the fix you should refuse.
Maintenance
Network security pricing explained line by line
What an office network security quote is made of, with real figures for hardware, subscription, per-device and per-user bases, support and the hours nobody counts.
Rules
Incident response reviews: assess providers before signing
Incident response reviews help small businesses test written commitments, sample reports, tabletop performance, and readiness before signing a provider.
Reviews
Four ways to arrange identity and access compared: local accounts, a password manager, SSO, and provisioning
Four ways to arrange identity and access compared: local accounts, a password manager, SSO, and provisioning. What each fixes, leaves open, and what changing takes.
Industry
How to evaluate business email compromise software
Business email compromise software: what to require, the trial tests to run against your worst case, and where the money is better spent first.
Costs
Small Business Cybersecurity: What to Do in the First 24 Hours After an Attack
First day steps for a suspected breach: what to disconnect, what to preserve, who to call, and where the deeper incident response and email compromise guides fit.
Reviews
A closer look at backup and recovery migration
Moving to a new backup arrangement without losing the ability to recover: overlap periods, key custody, seeding the first full copy, and when to retire the old one.
Costs
Backup and Recovery Alternatives for Small Business
Backup and recovery alternatives for small business, from rotated drives and OS tools to network storage, subscription services and managed provider options.
Maintenance
Best backup and recovery software 2027: facts and context, in plain terms
The best backup and recovery software for 2027, ranked by what each product restores and what it cannot, with the trial checks that separate them.
Maintenance
Alternatives to emailing bank details: portals, calls and holds
Business email compromise alternatives to emailed bank details: fixed records at onboarding, portals, bank checks, voice calls, and holding a payment.
Costs
Business email compromise during a mail migration: what breaks and what to freeze
Business email compromise risk rises during a mail migration. What breaks, the payment freeze to announce, what to run in parallel, and the cutover order.
Maintenance
Identity and access features that remove a decision, not just inform one
Identity and access features sorted by whether they remove a decision or merely inform one, what each costs in attention, and which to switch on first.