Cyber security, done properly.

Cyber security is the practice of protecting your computers, servers, networks, data and people from digital attacks, theft and damage. Without it, your business is exposed to ransomware, data breaches, phishing scams and financial fraud. UK businesses face over 65,000 attempted cyber attacks every day — and 60% of small businesses that suffer a serious attack go out of business within six months. It's no longer optional; it's essential.

Quite the opposite. SMEs are increasingly the primary target for cyber criminals precisely because they tend to have weaker defences than large enterprises. In the latest UK Government Cyber Security Breaches Survey, four in ten businesses reported a cyber attack or breach in the past year — and the majority were small or medium-sized businesses. Criminals assume smaller companies are easier targets and often use automated tools to exploit thousands of businesses simultaneously.

Ransomware is a type of malicious software (malware) that encrypts your files, making them completely inaccessible. The attackers then demand a ransom payment — usually in cryptocurrency — in exchange for the decryption key. Even if you pay, there is no guarantee you'll get your data back. The best protection is a combination of up-to-date endpoint security, regular offline backups, staff awareness training, and patched software. Foresight's managed security services address all of these.

Phishing is when criminals send fraudulent emails (or texts/calls) that appear to come from a trusted source — your bank, HMRC, Microsoft, a supplier — to trick you into clicking a malicious link, entering your password, or transferring money. Warning signs include unexpected urgency ("your account will be closed"), slight misspellings in email addresses, requests for login credentials, and links that don't match the sender's domain. Foresight offers simulated phishing campaigns and staff training to build your team's resilience.

A data breach occurs when unauthorised individuals gain access to confidential data — customer records, financial information, employee details or intellectual property. Under UK GDPR you are legally required to report certain breaches to the Information Commissioner's Office (ICO) within 72 hours. Consequences can include ICO fines of up to £17.5 million or 4% of global turnover, reputational damage, loss of customer trust, and civil lawsuits from affected individuals.

Malware is the umbrella term for any malicious software. A virus is a specific type of malware that replicates itself and spreads to other files and systems — like a biological virus. Spyware is malware designed to secretly monitor your activity and send information (passwords, keystrokes, browsing habits) back to an attacker. Other types include trojans (disguised as legitimate software), worms (self-propagating across networks), and adware. A layered security approach protects against all of these.

Cyber Essentials is a UK government-backed certification scheme managed by the NCSC (National Cyber Security Centre). It verifies that your organisation has five key technical controls in place: firewalls, secure configuration, user access control, malware protection and software updates. Independent research shows these five controls can prevent around 80% of common cyber attacks. If you handle government contracts, personal data, or work in sectors like healthcare or finance, Cyber Essentials is often mandatory — and increasingly expected by larger clients.

Cyber Essentials is a self-assessment — you complete a questionnaire about your security controls, which is then reviewed by a certification body. Cyber Essentials Plus takes it further with independent technical verification: a certified assessor tests your systems in person to confirm the controls are actually working as claimed. Cyber Essentials Plus provides a higher level of assurance and is increasingly required for government and public sector contracts. Foresight can guide you through and support both certification routes.

For most businesses, the Cyber Essentials self-assessment can be completed in one to two weeks once the five core controls are in place. If your business already has a reasonable level of IT hygiene, the process can be faster. Cyber Essentials Plus typically takes an additional two to four weeks to schedule and complete the technical audit. Foresight will assess your current posture, identify any gaps, remediate them and guide you through the certification process from start to finish.

Many breaches go undetected for months. Warning signs include: computers running unusually slowly, unexpected account lockouts, strange emails sent from your accounts, unfamiliar programs installed, or unusual network activity outside of business hours. However, sophisticated attacks leave no obvious signs. A vulnerability scan and dark web monitoring — both services Foresight provides — can reveal whether your credentials or data are already circulating among criminals, and whether your systems have known exploitable weaknesses.

Cyber security is a core component of UK GDPR compliance — Article 32 requires organisations to implement "appropriate technical and organisational measures" to protect personal data. However, GDPR compliance is broader than just technology: it also includes data governance policies, privacy notices, subject access request processes and staff training. Cyber Essentials certification provides strong evidence of appropriate technical measures. Foresight can help ensure your technical controls meet regulatory expectations.

Yes — cyber security reduces your risk, but cyber insurance covers the financial consequences if an incident still occurs. Cyber insurance typically covers costs such as forensic investigation, legal fees, regulatory fines, customer notification, PR crisis management and business interruption losses. Importantly, many insurers now require evidence of Cyber Essentials certification or equivalent controls before they'll offer cover — and some will reduce premiums if you hold it. Good cyber security and cyber insurance work together, not instead of each other.

Act quickly but calmly: 1) Isolate affected devices — disconnect them from the network immediately but don't switch them off. 2) Call your IT provider straight away — if you're a Foresight client, call our support line now. 3) Don't pay any ransom without taking advice. 4) Preserve evidence — don't delete files or wipe systems before a forensic review. 5) Report it — notify the ICO within 72 hours if personal data may be involved, and report to Action Fraud (0300 123 2040). 6) Notify affected parties if customer data has been compromised.

Foresight offers a comprehensive suite of cyber security services including: managed endpoint protection, email security and anti-phishing, vulnerability scanning, penetration testing, Cyber Essentials and Cyber Essentials Plus certification support, security awareness training and simulated phishing, web and mail filtering, server security, dark web monitoring, password management solutions, and incident response. We tailor the solution to your business size, sector and risk appetite — there's no one-size-fits-all here.

The cost of implementing good cyber security is typically a fraction of what a breach would cost you. The average cost of a cyber attack on a UK SME is over £4,500 — and for more serious incidents it can reach tens of thousands. Foresight's cyber security services start from a fixed monthly fee that scales with the number of users and the level of protection required. We'll provide a free assessment and transparent quote — no hidden costs. Book your free consultation to find out what's right for your business.

Absolutely. We're happy to complement your existing team or provider rather than replace them. Many clients engage Foresight specifically for cyber security expertise while retaining their current IT helpdesk. We're experienced at integrating with existing environments and third-party tools. If you choose to consolidate everything with Foresight over time, we make that transition seamless too — we're with you all the way.