Small office

The situation

Your office is a few people and a few laptops. Between you, you hold client tax records, financial statements, contracts or campaign files that people trust you with. There is no full time IT person, so security is whatever came with the computers plus whoever is handiest with technology.

What usually goes wrong

Small offices get attacked because attackers expect lighter defenses and nobody watching. The usual shapes are:

• A phishing email that looks like a client or a shared document and steals a sign-in, which gives the attacker your inbox and your clients’ messages.
• A fake invoice or a changed bank detail that appears to come from a supplier or a client, sent at just the right moment in the month.
• Ransomware that locks the files on a shared computer.
• A laptop lost on a trip, with client files on it.
• A former employee whose account is still switched on.

Built-in antivirus catches known threats. It does not watch for an intruder who is already inside, and it cannot pick up the phone.

What we set up

Security software on each computer is watched around the clock by a security team that investigates threats and can contain one, for example by isolating a device. DNS and web filtering blocks known malicious and phishing sites. Patching keeps your operating systems and apps up to date, and posture checks look at things like encryption.

For your accounts and email on Google Workspace or Microsoft 365, we watch for takeover, such as suspicious sign-ins and hidden forwarding rules, and respond by disabling access or ending sessions. Email security adds a second layer against phishing and impersonation, and security awareness training teaches your people what to watch for.

Add-ons are there when you need them. Device backup means a lost or locked laptop is not a lost client file. Cloud app log monitoring and network and firewall log monitoring watch the logs of the apps and the office firewall you list.

Your built-in antivirus stays. We add the layer that watches what programs actually do.

What it looks like day to day

You keep working. Updates and checks run in the background, and a monthly report tells you in plain language what we saw. Once a year we meet to review it all and plan the year ahead.

If a message looks wrong, forward it to us or call. If something gets through, a real person helps you handle it and can connect to your computer, with your permission, to sort it out. Tell us within five business days when someone joins or leaves, so the list of protected people stays right.

We are built to reduce your risk and stop threats early. No service can promise to stop every attack.