Reviews
Reading security compliance training with a sceptical eye
Security compliance training does two jobs: habits staff will keep, and records an insurer or customer will ask for. How to design for each separately.
Desk
Reporting Desk
Current developments in small business cybersecurity and what they change for the people affected.
Rules
Cloud security: what the experienced already know
Cloud security for a small business: what stays yours when software runs elsewhere, from sharing settings and connected applications to forgotten subscriptions.
Rules
Phishing defense software: three jobs, one buying order
Phishing defense software does three jobs: filtering, post-delivery response and awareness. Here is the buying order, the tests, and what to do first.
Reviews
Where phishing defense actually starts: MFA on email, not training
Phishing defense that does not rely on spotting the message: stronger second factors, mail settings worth changing, blameless reporting, a payment rule.
Maintenance
Security control troubleshooting, one change at a time
How to troubleshoot a security control that blocks real work: ask what changed, sort the fault, change one thing at a time, know when to stop and escalate.
Guides
Security foundations: accounts, backups and third parties
Security foundations for a small business: the account risks that matter, the three backup properties that hold up, and the third-party access worth reviewing.
Guides
7 takeaways on network security migration
A network security migration needs a dependency list, bench build, week of parallel running, clear cutover steps, and a firm rollback deadline.
Features
Office network security in five rungs, each with a check that proves it
Five rungs of office network security, from the router you own to no trusted office network, with what each leaves open and the check that proves it.
Reviews
Business email compromise evidence: message fields, mailbox signs, and their limits
Business email compromise evidence: which message fields and mailbox settings carry it, what each can honestly tell you, and how to write the finding up.
Rules
Image versus file, chain versus full: comparing backup architectures
Backup architectures compared rather than brands: image against file, chain against synthetic full, agent against agentless, and where each one fails you.
Guides
Backup and recovery security: protect backup systems
Backup and recovery security starts with separate credentials, protected copies, key custody, safe media handling, and safe restoration.
Features
Backup and recovery features to insist on and to skip
Backup and recovery features sorted into insist and skip: which ones prevent a failure that can happen to you, and the plain conditions for dropping the rest.
Reviews
Backup and recovery setup: nine steps for a small business
Nine steps for setting up backup in a small business: what to protect, how often, where copies live, and the restore test that closes each step.
Industry
Best incident response software 2027: facts and context, updated for 2027
Incident response software 2027: the tools small businesses actually buy, what each one does well, and the questions that decide the purchase.
Maintenance
Understanding incident response alternatives properly
Incident response arrangements for a small business, from a printed page to a retainer: what each buys, what it leaves open, and how to test it in advance.
Reviews
How to bench-test network security gear before buying it for 2027
How to evaluate office network security equipment: the five jobs it must do, a three-hour bench trial that proves them, and what the datasheet leaves out.
Guides
Backup and recovery: a grounded overview
Backup that survives ransomware: which threats each copy answers, why retention reaches back months, and what a quarterly restore test proves.
Guides
Business email compromise comparison: what to keep and what to drop
Business email compromise controls compared on how early they act, how each fails, the friction they cost, and which survive a compromised supplier mailbox.
Features
Do identity and access reviews actually work by resource, or by person?
Identity and access reviews scoped to four short lists: who signs them, what to do with unclaimed accounts, and using the same test to judge a product.
Features
Getting incident response right the first time
Incident response for a small firm: the decisions to settle in advance, what the first hour is for, when to call for help, and how to review afterwards.
Industry
Network security for small business: separation, router settings, and quarterly checks
Network security once the perimeter is gone: what to separate from what, the router and remote access settings that matter, and a quarterly set of checks.
Costs
Identity and access: the moments where control quietly fails
Identity and access as five moments: named accounts, privilege that creeps, the weak recovery path, shared logins, and an offboarding that runs fast.
Features
Business email compromise: stop payment fraud by phone
Business email compromise: the voice call-back rule that stops payment fraud, plus payee-file controls, detection signals, and first-hours response steps.