Stay secure. Get back up fast.
Practical protection for offices and small firms: multi-factor sign-in, email filtering, managed antivirus, staff training and backups that are checked every morning. If the worst happens, we restore your files and get people working again.
Cyber health check £395, then security and backup from £9 per user per month. Example prices.
You think you're covered.
But would you know?
Passwords are the only lock
One reused password and a convincing email are all it takes. Without multi-factor sign-in, a stolen password opens the mailbox.
"Microsoft backs it up, doesn't it?"
Microsoft keeps the service running. Bringing back a deleted folder from three months ago, or files encrypted by ransomware, is up to you.
Updates wait for someone to click
Laptops that haven't restarted in weeks are missing security fixes, and nobody knows which ones.
A backup nobody has tested
The backup drive has been "fine" for years. Nobody has tried a restore, so nobody knows how long it would take.
Staff can't spot a fake invoice
Most attacks start with an email. Without a little training, a fake payment request looks just like the real thing.
No plan for a bad day
If the files were locked tomorrow, who would you call, and what would you do first? Most offices have never written it down.
Several simple layers, all watched for you.
No single product stops everything. We set up each layer properly, monitor it and check it's still working every month.
What will we
put in place?
Multi-factor sign-in
Every account protected by a second step, with sign-ins from unusual places blocked or flagged.
Email filtering
Phishing, fake invoices and harmful attachments stopped before they reach the inbox.
Managed antivirus
Endpoint protection on every laptop and desktop, with alerts checked by an engineer.
Patching
Operating systems and common apps updated out of hours, with failures followed up.
Microsoft 365 backup
Email, OneDrive, SharePoint and Teams backed up separately, kept for a year by default.
Server and file backup
Local and off-site copies of servers and shared drives, checked every morning.
Staff awareness training
Short online lessons and safe practice phishing emails, with results you can see.
A recovery plan
Who to call, what to do first and how long a restore takes, written down and tested.
How long would a restore really take?
"We have a backup" isn't the same as "we can be working again by lunchtime". We run a test restore every quarter and record how long it took, so you know the answer before you need it.
Illustrative example. Not a real client result.
From health check to protected, step by step.
Cyber health check
We review your accounts, devices, email, Wi-Fi and backups, and score each one. You get a short report with the risks in priority order.
Fix the urgent things first
Usually multi-factor sign-in, admin accounts and a working backup. We agree a fixed price before we start.
Roll out the layers
Email filtering, managed antivirus, patching and device encryption, set up without disrupting the working day.
Train the team
A short session, then monthly lessons and practice phishing emails, so everyone knows what to look for.
Check backups every morning
We review last night's backup jobs each working day and fix any failure the same day.
Report and test each quarter
A plain-language report, a test restore and a short review of what has changed.
Clear reports, not jargon.
Every client sees the same few screens in the portal, plus a monthly report. These are examples with made-up data.
Backups. Every job from last night, checked each morning.
Devices. Updates, antivirus and encryption, device by device.
Accounts. Who has multi-factor sign-in, and who still needs it.
Monthly report. What we did and what we recommend.
Built for offices and small firms,
usually 5 to 75 people.
A good fit if you…
- Hold client data you'd hate to lose or leak
- Use Microsoft 365 for email and files
- Have no one whose job is security
- Need to answer security questions from clients or insurers
- Want to know your backups really work
Probably not for you if you need…
- A 24/7 security operations centre
- Penetration testing of your own software
- Formal certification audits run in-house
- Support for industrial or factory control systems
- A provider for more than a few hundred users
Everything you need to start.
A scored health check
Accounts, devices, email, Wi-Fi and backups, each scored red, amber or green, with the fixes in priority order.
A written recovery plan
Who to call, what to switch off, how to restore and how to tell clients, on two pages you can print.
A monthly report
Backups, updates, blocked threats and training results, in plain language, with anything that needs a decision.
Start with a check. Then stay protected.
For offices up to 25 people · report within 5 working days
- Review of accounts, admin access and multi-factor sign-in
- Email security and phishing protection check
- Devices, updates and antivirus
- Backups and a test restore of one folder
- Scored report and a 30-minute call to go through it
Larger offices and more than one site are quoted before we start.
If you join a managed IT plan within three months, the health check fee comes off your onboarding.
Per user per month, from · included in Managed IT plans
- Microsoft 365 backup, kept for a year
- Email filtering and phishing protection
- Managed antivirus on every device
- Monthly awareness lessons and practice phishing emails
- Daily backup checks and a quarterly test restore
Server and file backup is priced by storage, from £35 a month.
12-month agreement, then rolling monthly with 30 days' notice.
All prices on this site are examples. Ornsley IT is an example business, so no checkout or payment is connected.
Think you've been hacked? Call us first.
If a mailbox is sending odd emails, files won't open or someone has paid a fake invoice, phone the support line straight away on 01234 567 890. Don't switch anything off or delete anything until we've spoken. We'll lock down the account, contain the problem and start recovery.
Incident response includes
- Resetting accounts and revoking sessions
- Isolating affected devices
- Restoring files and mailboxes from backup
- A written timeline of what happened
- Help with the information your insurer will ask for
Incident response doesn't include
- Legal advice
- Paying or negotiating a ransom
- Forensic investigation for court
- Recovering data that was never backed up
Incident response is included for clients on a Managed or Managed Plus plan. For everyone else it's charged by the hour. Talk to us.
Security and backup questions.
Doesn't Microsoft back up my email?
Microsoft keeps the service available and keeps deleted items for a short time. A separate backup lets you restore a mailbox, folder or file from months ago, or after ransomware.
How often are backups checked?
Every working morning. A failed job is fixed the same day, and we run a test restore every quarter.
Will multi-factor sign-in annoy my staff?
Hardly. We use an app prompt and remember trusted devices, so most people approve a sign-in only occasionally.
Do you help with security questionnaires?
Yes. We can answer the IT sections of client and insurer questionnaires, and help you work towards recognised security certifications.
Do I need to replace my antivirus?
Usually yes, so it can be managed and monitored centrally. We remove the old product and install the new one remotely.
What does staff training involve?
A short starter session, then a few minutes of online lessons each month and occasional practice phishing emails. You see who has completed them.
Can you secure our phones too?
Yes. Work phones can be enrolled in device management, so email and files stay protected and can be wiped if a phone is lost.
How long are backups kept?
One year by default for Microsoft 365, and 30 days of daily copies for servers and file shares. Longer retention can be added.
Is this included in managed IT?
Yes. Managed and Managed Plus plans include security and backup. Essentials includes antivirus and patching, and backup can be added.
Are these real prices?
No. This is an example website for an example business, so every price, report and figure on it is an example.
Know you're protected. Know you can recover.
Start with a cyber health check, £395. A scored report and a clear list of what to fix first.