Cybersecurity Articles
The threats that actually reach businesses this size, and the controls that stop them.
Few firms of 20 to 200 people have a dedicated security team. You're still running mailboxes and laptops that leave the office. Supplier payments still move on an email. Cybersecurity at this size of business is the work of keeping those things from becoming the way an attacker gets in. Checking who can open which systems is the starting point. A stolen password won't be stopped if nothing else stands in the way. Devices need to stay under management once they leave the building. An unused admin account left in Microsoft 365 is another open door.
Insurers and larger customers now ask how the controls are run. A firewall on its own no longer answers the questionnaire. You also need a named path for a lost laptop or a mailbox that starts sending mail you didn't write. A monthly retainer can take on the monitoring. Your managers still own offboarding and the payment checks that no software can make for you.
6 articles in Cybersecurity
Cybersecurity: common questions
What should we do if someone clicks a phishing email?
Disconnect that device from the network. Change the password on the account they used, from a different machine, and revoke active sessions in Microsoft 365 so the attacker cannot stay signed in. Check sent items, forwarding rules and recent file sharing. Tell whoever manages your IT immediately, even if nothing looks wrong yet. Keep the laptop offline until it has been checked. Record what was clicked, when, and which account was used.
Is Microsoft 365 secure enough on its own?
Microsoft 365 includes strong tools, but they are often left on defaults. Multi-factor authentication has to be on for every account. Mailbox auditing and device compliance then need turning on and keeping current. A tenant with shared passwords, old sign-in methods still enabled, or admin accounts used for daily email is not protected by the brand name. Wanzo can run that configuration as part of managed cybersecurity on AI + Managed IT, from £1,250 a month.
Can employees use personal laptops for work?
A personal laptop sits outside your patching and encryption, and you can't remote-wipe it. If it's lost, company mail and files stay on the machine. If malware runs on it, you may have no record of what happened. Company-owned devices let you enforce encryption and keep software current. Access can be cut when someone leaves. If a personal machine has to be used briefly, open mail and files in the browser under a managed account and block downloads.
Ready to talk?
Book a free, no-obligation discovery call. We'll learn about your business and show you exactly how Wanzo can help, with a bespoke proposal within 48 hours.
No commitment. No sales pressure. Just honest advice.