Blog

If you are weighing up Microsoft 365 plans for your business and wondering whether to pay the extra for Business Premium ( or whether Intune specifically is worth the cost ) this article gives you a straight answer.The short version: for most small businesses in the UK handling client data, employee devices, or remote workers, Intune is worth it. The longer answer depends on what you are already paying for and what your biggest risks actually are.&nbsp; What is Microsoft Intune? Intune is Microsoft's cloud-based device management platform. It lets you control how every laptop, phone, and tablet connecting to your business data is configured, secured, and monitored, from one central dashboard, without needing to be in the same room as the device.In practical terms, it means you can:Enforce encryption and strong PINs on every device accessing company email Push software and security updates to all devices automatically Wipe a lost or stolen device remotely, including personal phones with a work profile Block access to company data from any device that does not meet your security policy Set up a new employee's laptop automatically, without an IT engineer on site It works across Windows, macOS, iOS, and Android. And it integrates natively with Microsoft 365, Entra ID, and Defender for Business.&nbsp; How much does Intune cost for a small business in the UK? This is where many small business owners are surprised: if you are already on Microsoft 365 Business Premium, you already have Intune included.Microsoft 365 Business Premium costs £17.60 per user per month (excluding VAT, as of mid-2026). It includes the full Office suite, Exchange email, Teams, SharePoint, and a full security stack: Intune, Defender for Business, and Entra ID Premium P1.Microsoft 365 Business Standard, by contrast, costs £9.40 per user per month and does not include Intune, Defender for Business, or any device management capability at all.So the real question for most small businesses is not "should I pay for Intune?" but "should I be on Business Premium rather than Business Standard?" For a team of ten, that difference is £82/month. Whether that is worth it depends on what Intune replaces or prevents.If you need Intune standalone without a Business Premium licence, it starts at around $4/user/month, but you would also need Entra ID Premium P1 separately for conditional access, which is where most of the real security value sits.&nbsp; What does Intune actually do day-to-day for a small business? Device enrolment and setup With Intune and Windows Autopilot, a new employee can receive a laptop directly from the supplier, sign in with their work account, and have the device automatically configured with your company's apps, policies, and security settings. No IT engineer needs to touch it first. For a small business without a dedicated IT team, this alone saves significant time with each new hire.Remote wipe If a staff member loses their phone or laptop (or leaves the business ) you can immediately remove all company data from the device. On personal phones using a work profile, Intune removes only the business data and leaves personal content untouched. This is not a nice-to-have for any business handling client information; it is a basic control your insurer and clients increasingly expect.Conditional access Working with Entra ID Premium P1 (included in Business Premium), Intune lets you set rules like: "only allow access to company email and files from devices that are enrolled, encrypted, and compliant with our security policy." A device that has not been patched, or a personal laptop that has never been enrolled, gets blocked. This is one of the most effective controls against account takeover and data breach.Automated patching Intune manages Windows Update policies centrally, so you can control when updates are pushed and ensure no device in your business is running months behind on patches. Unpatched devices are one of the most common entry points for ransomware.App management on personal devices (BYOD) Many small businesses have staff checking work email on personal phones. Without Intune, you have no control over what happens to that data. With Intune's mobile application management, you can apply policies to the work apps on a personal phone — requiring a PIN, blocking copy-paste to personal apps, and wiping work data if needed — without touching anything personal on the device.&nbsp; When is Intune not worth it? If your team is two or three people, everyone uses company-owned devices, and your work does not involve sensitive client data, the overhead of configuring and managing Intune may not be justified at this stage. Microsoft 365 Business Standard is likely sufficient.Similarly, if you are in a very early stage and cost is the overriding concern, Business Standard gets you functional email, Office apps, and Teams without the security stack.But if any of the following apply, Business Premium with Intune is worth the extra cost:You have remote or hybrid staff accessing company data from home devices Staff use personal phones for work email You handle client data in healthcare, legal, finance, or recruitment You are pursuing or considering Cyber Essentials certification You have had staff turnover and are not confident devices were properly cleared Your cyber insurance renewal has started asking about device management controls &nbsp; Cyber Essentials and Intune Cyber Essentials is the UK government-backed certification that confirms your business has the five core technical controls in place. It is increasingly required by clients in regulated sectors and referenced by cyber insurers.One of those five controls is secure device configuration. Intune is the most straightforward way to demonstrate and enforce that control across a mixed device estate. Microsoft 365 Business Premium includes everything the NCSC's Cyber Essentials scheme expects from a Microsoft 365 environment when configured correctly.&nbsp; The bottom line For most UK small businesses handling any kind of sensitive data (client records, financial information, personal data ) Microsoft 365 Business Premium is the right foundation, and Intune is a core part of why. It costs £8.20/user/month more than Business Standard, and in exchange you get device management, endpoint protection, and identity controls that would cost significantly more to assemble from separate tools.The main caveat is that Intune needs to be configured properly to deliver its value. Out of the box, enrolling devices and setting meaningful policies takes time and some technical knowledge. That is where a managed IT provider adds real value, handling the setup, ongoing management, and ensuring your configuration actually meets the standard your business needs.At Blackgate Tech, we deploy and manage Microsoft 365 Business Premium for small businesses across London and UK, including Intune configuration, Defender setup, and Cyber Essentials alignment. If you are not sure whether your current Microsoft 365 setup is properly configured, we offer a no-obligation review.Get in touch: info@blackgate-tech.co.uk&nbsp;

Is Microsoft Intune worth it for a small company?

The short answer is yes, and in the UK, it is no longer really a choice. The country's traditional copper phone network, the PSTN, is being switched off by BT Openreach in January 2027. Openreach has already stopped installing new landlines. If your small business is still running on a traditional phone line, you need a plan before it stops working entirely.But even setting the deadline aside, VoIP wins on almost every metric that matters to a small business: cost, features, flexibility, and call quality. Here is what you need to know.&nbsp; What is VoIP? VoIP (Voice over Internet Protocol) is a phone system that runs over your internet connection rather than a copper wire. Instead of a physical line from the exchange to your premises, calls are routed digitally through the cloud. You can use desk phones, a laptop app, or a mobile app, or all three at once.Hosted VoIP systems (sometimes called cloud phone systems) are managed by a provider. You pay a monthly per-user fee and get a fully featured phone system with no hardware investment and no on-site PBX to maintain.&nbsp; The PSTN switch-off: why this affects every UK business BT Openreach is retiring the Public Switched Telephone Network (the copper infrastructure that has carried landline calls since the Victorian era) by January 2027. ISDN lines are included. After that date, traditional landlines simply stop working.If your business phone number is on a PSTN or ISDN line, you will lose it unless you migrate to a digital alternative. The good news: your existing number can be ported to a VoIP provider in 7–14 days with no downtime if you plan ahead. Leaving it until late 2026 risks being caught in a rush of last-minute migrations.&nbsp; VoIP vs landline: how they compare for a small business Cost Traditional landlines carry line rental, per-minute call charges, and in many cases the cost of a PBX system and physical cabling. VoIP runs over your existing broadband with little or no new hardware. Plans typically bundle unlimited UK minutes and significantly cheaper international rates.Most businesses switching to VoIP save 40–70% on their phone bills. For a small team, that is a meaningful number each month.Features This is where the gap is most obvious. A traditional landline gives you a phone number and basic call handling. A hosted VoIP system gives you:Auto-attendant (virtual receptionist) Call recording and transcription Ring groups and hunt lines Voicemail to email Mobile and desktop apps so staff can take calls anywhere Call analytics and reporting CRM integration (Microsoft 365, HubSpot, Salesforce, and others) Video calling on the same platform For a small business trying to present professionally, auto-attendant and ring groups alone justify the switch.Call quality The idea that VoIP calls sound worse than landlines is outdated. Traditional analogue calls use a narrow frequency band ( 300 Hz to 3,400 Hz ) that was designed when bandwidth was scarce. VoIP using wideband audio codecs delivers noticeably clearer calls. On a stable broadband connection, VoIP call quality is equal to or better than a traditional landline.Flexibility and remote working VoIP works on any device with an internet connection. Your team can take and make calls from their mobiles or laptops using the same business number, whether they are in the office, at home, or on the road. This is simply not possible with a traditional landline.For small businesses with hybrid or remote staff, this removes the need for call forwarding workarounds and ensures customers always reach someone on the main business number.Scalability Adding a new user on a traditional landline means new hardware, new wiring, and a call to your provider. Adding a user on a hosted VoIP system takes minutes and costs a monthly licence fee. Removing a user when someone leaves is equally straightforward.Reliability A common concern about VoIP is dependability is what happens if the internet goes down? Modern hosted systems include built-in failover routing. Calls can automatically divert to mobile numbers if your broadband drops. For most small businesses, a 4G mobile backup connection adds a further layer of resilience at minimal cost.&nbsp; Are there any cases where a landline is still the right choice? For most UK small businesses in 2026, no. The only scenarios where you might delay are if you have specialist legacy equipment connected to your phone line (some alarm systems, card terminals, or lifts use analogue connections) in which case those devices need to be assessed and migrated separately, not left on the old line.&nbsp; What does migration actually involve? Less than most business owners expect. For a small team:Setup typically takes 24 hours for new numbers, 7–14 working days if porting existing numbers No downtime. You can run VoIP alongside your existing line temporarily No need to replace handsets if you prefer to keep desk phones (IP phones or adaptors are inexpensive) Staff need minimal training for basic use; most find it more intuitive than a traditional system &nbsp; What Blackgate Tech recommends For small businesses in London and across the UK, we recommend moving to a hosted VoIP system now rather than waiting for the 2027 deadline. The cost savings are immediate, the features are significantly better, and you avoid the risk of a forced migration under pressure.Get in touch: info@blackgate-tech.co.uk&nbsp;

Is VoIP better than a landline for a small business in the UK?

Running a law firm in the UK means operating under some of the most demanding compliance obligations of any sector. The SRA, UK GDPR, the Data Protection Act 2018, and increasingly stringent cyber insurance requirements all place direct obligations on how your firm stores data, manages access, and responds to incidents.For many practices, the honest answer to "who is responsible for making sure our IT meets these standards?" is "no one, specifically." That's where a managed IT provider changes the picture.&nbsp; What compliance actually means for your IT systems The compliance obligations facing UK law firms translate directly into technical requirements:SRA Accounts Rules 2019 require accurate, secure records of all client money transactions, with robust backup and audit trails supporting your legal accounting software. SRA Code of Conduct mandates that client affairs remain confidential, which means encrypted storage, secure communications, and access controls across your entire IT infrastructure. UK GDPR and the Data Protection Act 2018 classify law firms as data controllers. The SRA expects "appropriate technical and organisational measures" to be in place. Failure to protect client data can result in both SRA disciplinary action and ICO fines. SRA Risk and Compliance standards require regular risk assessments of technology systems, including penetration testing and vulnerability scanning. The Data (Use and Access) Act 2025, in force from February 2026, has introduced further obligations around data governance and vendor oversight. In 2025 alone, the SRA received over 2,300 reports of data breaches and cyber security incidents affecting solicitor practices. The regulator also intervened in 47 practices in 2024–2025 where IT security failures were cited as a primary or contributing factor. These are not theoretical risks.&nbsp; Where a managed IT provider adds real value 1. Email security and encrypted communications Unencrypted email is not suitable for transmitting sensitive client data, SRA guidance is explicit on this. A managed IT provider will implement secure email gateways, spam filtering, anti-phishing controls, and where necessary encrypted communication portals, so your fee earners are protected without needing to think about it.2. Access controls and identity management Microsoft Entra ID with multi-factor authentication is now baseline for any compliant legal IT environment. Your managed IT provider should configure role-based access so staff only reach the data relevant to their work, and so that access is revoked immediately when someone leaves the firm.3. Backup, business continuity, and disaster recovery The SRA expects firms to maintain business continuity plans and demonstrate they can restore operations following an incident. A managed IT provider will implement automated daily backups of your case management system, Microsoft 365 data (including Teams and SharePoint), and any on-premise servers.4. Endpoint protection and patch management Every device connected to your network is a potential entry point. Managed endpoint protection covering laptops, desktops, and mobile devices, combined with automated patch management, ensures known vulnerabilities are closed before they can be exploited. This is a core expectation in both Cyber Essentials and modern professional indemnity insurance questionnaires.5. Cyber Essentials certification The NCSC's Cyber Essentials scheme is increasingly referenced in SRA guidance, Lexcel accreditation, and cyber insurance applications. A managed IT provider can implement the five technical controls required: firewalls, secure configuration, access control, malware protection, and patch management.6. Incident response planning If a breach occurs, you have 72 hours to notify the ICO where the threshold is met, with parallel obligations to the SRA and your PII insurer. A managed IT provider can build a single incident response runbook that covers all three, reducing decision-making time during an active incident when every hour counts.7. Vendor oversight and GDPR documentation Under the Data (Use and Access) Act 2025, firms must carry out due diligence on third-party systems and maintain written agreements covering GDPR obligations. Your managed IT provider should maintain and update your data processing agreements, assess the compliance posture of cloud and SaaS tools in use across the firm, and document this for regulatory review.&nbsp; What to look for in an IT provider for your law firm Not every IT provider understands the legal sector. When evaluating options, look for a provider who:Has direct experience supporting SRA-regulated firms and understands the specific obligations of legal practice Can assist with Cyber Essentials certification, UK GDPR compliance documentation, and SRA risk assessment responses Offers proactive monitoring and patch management as standard, not a reactive break-fix model Provides support for the case management and legal accounting platforms your firm uses &nbsp; The bottom line Compliance is not a one-time project. The SRA updates its guidance, GDPR requirements evolve, and cyber threats change shape constantly. A managed IT provider that understands the legal sector does not just keep your systems running, it acts as a continuous compliance partner.At Blackgate Tech, we work with London-based law firms and legal practices to implement the technical controls the SRA, ICO, and your insurer actually expect. If you're not sure where your firm currently stands, we offer a no-obligation IT and compliance assessment.Get in touch: info@blackgate-tech.co.uk&nbsp;

How a managed IT provider can help a UK Law Firm stay compliant

<h3> If you run a small or medium-sized business in London, chances are you've come across the term Cyber Essentials,&nbsp;maybe from a supplier, an insurance company, or a government contract requirement. But what actually is it, and do you need it?</h3>What Is Cyber Essentials? Cyber Essentials is a UK government-backed cybersecurity certification scheme, run by the National Cyber Security Centre (NCSC) and IASME. It's designed to help businesses of all sizes protect themselves against the most common types of cyberattack.It's not a complex, expensive enterprise standard. It's a practical baseline, five core controls that, if properly implemented, protect against around 80% of the common attacks targeting UK businesses.The five controls are:Firewalls: protecting your network Secure configuration: &nbsp;making sure devices and software are set up securely User access control: limiting who can access what Malware protection: defending against malicious software Security update management: &nbsp;keeping systems patched and up to date &nbsp; Two Levels of Certification Cyber Essentials (CE) A self-assessment questionnaire verified by a certification body. Most businesses can complete this within a few days once the controls are in place.Cyber Essentials Plus (CE+) : The same five controls, but verified by a hands-on technical audit. A higher level of assurance, required for some government contracts and higher-risk sectors.&nbsp; Does My Business Need It? For many London SMBs, the answer is increasingly yes,and here's why.Government and public sector contracts If you supply to the public sector, Cyber Essentials is mandatory for most contracts involving digital services or data handling. The Legal Aid Agency made it a requirement for Standard Crime Contract holders from October 2025. Many NHS organisations and local councils now expect it as standard from their suppliers.Your customers are starting to ask for it It's not just government. Larger businesses are increasingly requiring Cyber Essentials from their suppliers as part of onboarding and due diligence,particularly in finance, legal, healthcare, and real estate. If you're in one of those sectors, expect the question to come up.Cyber insurance Insurers are tightening requirements. Many now ask whether you're Cyber Essentials certified as part of the underwriting process, and certified businesses often benefit from better premiums. Businesses with turnover under £20m who certify their entire organisation also receive £25,000 of free cyber liability insurance included with the certification.It's good baseline security practice Even if none of the above apply to you right now, Cyber Essentials gives you a structured way to check your business is protected against the most common threats, phishing, ransomware, credential attacks. UK businesses saw a 36% year-on-year increase in cyber attacks in 2025.&nbsp; What's Changed in 2026? The scheme was updated in April 2026 with new requirements. The five controls haven't changed, but enforcement has tightened significantly.The biggest change: MFA is now an automatic failure point. If any cloud service your business uses offers multi-factor authentication,whether that's Microsoft 365, your CRM, your accounting software, and you haven't enabled it, your assessment will automatically fail. No exceptions.Cloud services are also now fully in scope. Previously, some businesses excluded cloud platforms from their assessment. That's no longer acceptable under the updated scheme.If you're renewing or applying for the first time, these are the rules you'll be assessed against.&nbsp; How Much Does It Cost? The IASME self-assessment fee is typically £300–£500 + VAT depending on organisation size. The total cost depends on how much remediation your IT setup needs beforehand. For businesses already using Microsoft 365 with MFA properly configured, the path to certification is often straightforward.&nbsp; How Blackgate Tech Can Help We work with London SMBs across finance, hospitality, healthcare, real estate, and law to prepare for and achieve Cyber Essentials certification. We'll review your current setup, identify any gaps, and make sure everything is in place before you go through the assessment.If you'd like a free initial conversation about where your business stands, get in touch, we're happy to take a look.

What Is Cyber Essentials and does my business need it?

<h3>Microsoft Intune makes managing and securing every device in your business simple. Here's what it is, how enrolment works, and why London SMBs should be using it.</h3>Your Staff Are Working From Everywhere. Is Every Device They Use Secure?Your team uses laptops, phones, and tablets to access company emails, files, and systems every day. Some of those devices are in the office. Some are at home. Some are on trains, in coffee shops, and in client meeting rooms across London.Every single one of those devices is a potential entry point for a cyberattack. If one gets lost, stolen, or compromised, your business data could go with it.This is exactly the problem Microsoft Intune was built to solve. And if your business uses Microsoft 365, which most London SMBs do, you may already be paying for it without knowing it.&nbsp; What Is Microsoft Intune?Microsoft Intune is a cloud-based device management platform that gives your IT team, or your IT provider, complete visibility and control over every device that accesses your business systems.With Intune, you can:See every device connected to your business network in one place Push security policies, software updates, and configurations to devices automatically Remotely wipe a lost or stolen device to protect company data Ensure every device meets your security standards before it can access company systems Manage company-owned devices and personal devices used for work (BYOD) It works across Windows, macOS, iOS, and Android, meaning it covers every device your team is likely to use regardless of whether it's a company laptop or a personal iPhone.&nbsp; What Is Device Enrolment and Why Does It Matter?Device enrolment is the process of registering a device with Intune so it can be managed, monitored, and secured. Think of it as checking a device in to your business, once enrolled, you have full visibility and control over it.Until a device is enrolled, it is essentially invisible to your IT team. You have no way of knowing whether it has the latest security updates, whether it has antivirus installed, or whether it is safe to access company data.Enrolment changes that. Once a device is enrolled in Intune, you can:Apply security policies automatically Every enrolled device gets your security settings applied the moment it connects, password requirements, screen lock timers, encryption settings, and more. No manual configuration needed.Control what apps are installed You decide which apps are allowed on enrolled devices. You can push approved apps automatically and block apps that pose a security risk.Keep software up to date Outdated software is one of the most common causes of security breaches. Intune ensures every enrolled device has the latest updates installed, automatically and without relying on individual staff members to remember.Protect company data on personal devices With Intune's Mobile Application Management (MAM), you can protect company data on personal devices without taking control of the whole phone. Company emails and files are kept separate from personal content, and can be wiped remotely without touching personal photos or apps.Remote wipe when a device is lost or stolen If a laptop goes missing or a phone is stolen, you can remotely wipe all company data from that device within minutes. Without Intune, that data is gone with the device.&nbsp; How Device Enrolment Works in Practice Enrolling devices with Intune is simpler than most businesses expect. Here is how the process typically works for a London SMB:Step 1, Set up your Intune environment Your IT provider configures Intune within your Microsoft 365 tenant, setting up the security policies, compliance rules, and app configurations that match your business needs.Step 2, Enrol company-owned devices For company laptops and desktops, enrolment can be done automatically using Windows Autopilot. New devices can be shipped directly to staff and configured automatically when they first switch them on, without any manual IT setup.Step 3, Enrol personal devices Staff who use personal devices for work download the Microsoft Intune Company Portal app and follow a simple guided process to enrol their device. The whole thing takes less than ten minutes and only gives your IT team visibility over work-related activity, not personal content.Step 4, Policies apply automatically Once enrolled, your security policies apply immediately. Updates get pushed, apps get installed, and compliance checks run in the background without any action needed from your staff.Step 5, Ongoing management From the Intune dashboard, your IT provider can see the compliance status of every device at a glance, identify any that fall out of compliance, and take action remotely when needed.&nbsp; Who Needs Microsoft Intune? The honest answer is any business where staff use devices to access company data. But Intune is particularly valuable for:Businesses with remote or hybrid workers When staff work from home or on the move, you lose the natural security of an office network. Intune gives you the visibility and control you'd have in an office, regardless of where your team is working.Businesses using personal devices for work If staff use their own phones or laptops to access company email or files, those devices are outside your control, unless you use Intune. It lets you secure company data on personal devices without invading personal privacy.Businesses in regulated industries If you operate in finance, healthcare, or law, you have compliance obligations around how data is accessed and protected. Intune helps you meet those obligations and provides the audit trail to prove it.Businesses that have experienced a security incident If you've ever had a device lost, stolen, or compromised, you'll know the anxiety of not knowing what data was on it. Intune eliminates that anxiety entirely.&nbsp; Common Questions About Intune Do we already have access to Intune? If your business uses Microsoft 365 Business Premium, you already have access to Intune as part of your subscription. Many businesses are paying for it without using it. Get in touch and we can check your current licence.Will Intune give my employer access to my personal phone? No. When a personal device is enrolled using the Company Portal, your employer can only see and manage work-related apps and data. Personal photos, messages, and apps remain completely private.How long does it take to enrol all our devices? For most small and medium businesses, a full device enrolment project can be completed within a few days. We handle the setup and configuration, and guide your staff through enrolling their own devices with minimal disruption.What happens when a member of staff leaves? When someone leaves your business, we remove their device from Intune and wipe all company data from it remotely. Their access to company systems is revoked immediately, with no risk of them retaining sensitive data.Is Intune only for Windows devices? No. Intune manages Windows, macOS, iOS, and Android devices, meaning it covers every device your team is likely to use.&nbsp; How Blackgate Tech Can Help At Blackgate Tech, we set up and manage Microsoft Intune for small and medium businesses across London. We handle everything from initial configuration and device enrolment to ongoing management and support, all as part of your monthly IT support package.If your business is using Microsoft 365 but hasn't yet enrolled your devices, you are leaving a significant security gap open. We can audit your current setup, check what licences you already have, and get your devices enrolled and secured quickly.&nbsp; Don't Leave Your Devices Unmanaged Every unmanaged device in your business is a risk. A lost laptop, a stolen phone, or a personal device with outdated security software could be all it takes for your business data to end up in the wrong hands.Microsoft Intune closes that gap. And with Blackgate Tech managing it for you, you get complete peace of mind without any of the complexity.

Why every  business should be managing devices with Microsoft Intune

<h3>Discovering Your Business Has Been Hacked Is Terrifying. Here's Exactly What to Do.</h3> It happens more than most people realise. A staff member clicks a suspicious link, a password gets compromised, or ransomware silently encrypts your files overnight. One moment everything is fine, the next your business is in crisis.If you discover your business has been hacked, the next few hours are critical. The actions you take, and the mistakes you avoid, in those first moments can mean the difference between a contained incident and a catastrophic breach.This guide walks you through exactly what to do, step by step, so you can act fast, limit the damage, and get your business back on its feet.&nbsp; Step 1: &nbsp;Don't Panic, But Act Immediately The worst thing you can do when you discover a breach is freeze. The second worst thing is act without thinking and accidentally make things worse.Stay calm and get the right people involved immediately. If you have a managed IT provider, call them first. This is exactly the situation they exist for and they will know what to do.If you don't have an IT provider, keep reading.&nbsp; Step 2: Isolate the Affected Systems The moment you suspect a breach, disconnect the affected devices from your network immediately. Unplug the ethernet cable, turn off Wi-Fi, and isolate any device that may have been compromised.This is critical. Many cyberattacks, particularly ransomware, spread rapidly across networks. Every second a compromised device remains connected gives the attacker more time to move through your systems, encrypt more files, and cause more damage.Do not turn the devices off completely unless instructed to do so by your IT provider. Turning a device off can sometimes destroy forensic evidence needed to understand what happened and how.&nbsp; Step 3: &nbsp;Change Your Passwords Immediately From a clean, unaffected device, change the passwords for every business account you can access. Start with the most critical ones first:Email accounts Microsoft 365 or Google Workspace admin accounts Banking and financial platforms Your website and hosting accounts Any CRM, ATS, or business management software Social media accounts Enable multi-factor authentication on every account if you haven't already. This adds a second layer of security that makes it significantly harder for attackers to maintain access even if they have your password.&nbsp; Step 4: Assess What Has Been Compromised Once the immediate threat is contained, you need to understand the scope of the breach. Work with your IT provider or a cybersecurity specialist to establish:Which systems and devices were affected What data may have been accessed, stolen, or encrypted How the attacker got in How long the breach may have been active before it was discovered Whether the attacker still has access to any part of your systems This information is critical not just for recovering your systems, but for fulfilling your legal obligations under UK GDPR.&nbsp; Step 5: Report the Breach If Required Under UK GDPR, if personal data has been compromised in a breach, you are legally required to report it to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it. Failing to report a notifiable breach can result in significant fines on top of the damage already caused by the attack itself.You may also need to notify affected individuals if the breach is likely to result in a high risk to their rights and freedoms, for example if financial data, medical records, or sensitive personal information has been exposed.If you are unsure whether your breach is notifiable, the ICO's website has clear guidance on what qualifies as a notifiable breach.&nbsp; Step 6: Restore From Backups If your data has been encrypted by ransomware or deleted by an attacker, your backups are your lifeline. This is why having a reliable, regularly tested backup solution is one of the most important investments any business can make in its IT.A good backup solution means:Your data is backed up automatically every day Backups are stored separately from your main systems so ransomware can't reach them You can restore your data quickly and completely without paying a ransom If you don't have backups, or your backups were also compromised, recovery becomes significantly more complex, time-consuming, and expensive. In some cases, data may be permanently lost.&nbsp; Step 7: Do Not Pay the Ransom If you have been hit by ransomware and are being asked to pay to recover your files, our strong advice is do not pay.Paying the ransom does not guarantee you will get your data back. It does not guarantee the attacker will not publish your data anyway. And it marks your business as a target willing to pay, making you more likely to be attacked again in the future.Work with your IT provider and, if necessary, a specialist cyber incident response team to explore all recovery options before considering payment.&nbsp; Step 8: Communicate With Your Team and Clients Your team needs to know what happened, what systems are affected, and what they should and should not do while recovery is underway. Clear internal communication prevents panic and stops staff from accidentally making things worse.If client data has been compromised, you have both a legal and ethical obligation to let them know. Be clear about what happened, what data was involved, what you are doing to fix it, and what steps you are taking to prevent it happening again.&nbsp;Step 9: &nbsp;Conduct a Full Post-Incident Review Once the crisis is over, conduct a thorough review of what happened and why. Work with your IT provider to understand:How the attacker got in What security gaps existed that allowed the breach to happen What could have been done to detect it sooner What changes need to be made to prevent it happening again This review should result in a concrete action plan, not just a list of observations. Every gap identified should have a clear owner, a timeline, and a resolution.&nbsp; Step 10: Strengthen Your Defences A cyberattack is a painful experience. But it is also an opportunity to build a significantly stronger security posture than you had before. Use the lessons learned from the incident to implement the protections that should have been in place already:Multi-factor authentication on all accounts Endpoint protection on every device Regular security awareness training for all staff Automated, offsite backups tested regularly Device management with Microsoft Intune Email security filtering A clear incident response plan so you know exactly what to do if it happens again &nbsp; How Blackgate Tech Can HelpAt Blackgate Tech, we help London businesses respond to cyber incidents, recover their systems, and build the defences needed to prevent future attacks. If your business has been compromised, call us immediately. We respond fast, work methodically, and get you back on your feet as quickly as possible.We also help businesses that have never been attacked put the right protections in place before an incident occurs, because prevention is always faster, cheaper, and less stressful than recovery.

What to do if your business gets hacked

Blackgate Tech

Blackgate Tech is London‑based Managed Service Provider that delivers modern, trustworthy IT solutions for small businesses with 5–50 users. Offering help‑desk support, endpoint protection, Microsoft 365 and cloud management, backups, disaster recovery and VoIP, Blackgate combines professional, friendly service with a strong security focus.

Blog

Is Microsoft Intune worth it for a small company?

Is VoIP better than a landline for a small business in th...

How a managed IT provider can help a UK Law Firm stay com...

What Is Cyber Essentials and does my business need it?

Why every business should be managing devices with Micro...

What to do if your business gets hacked