Blog

<h3> If you run a small or medium-sized business in London, chances are you've come across the term Cyber Essentials,&nbsp;maybe from a supplier, an insurance company, or a government contract requirement. But what actually is it, and do you need it?</h3>What Is Cyber Essentials? Cyber Essentials is a UK government-backed cybersecurity certification scheme, run by the National Cyber Security Centre (NCSC) and IASME. It's designed to help businesses of all sizes protect themselves against the most common types of cyberattack.It's not a complex, expensive enterprise standard. It's a practical baseline, five core controls that, if properly implemented, protect against around 80% of the common attacks targeting UK businesses.The five controls are:Firewalls: protecting your network Secure configuration: &nbsp;making sure devices and software are set up securely User access control: limiting who can access what Malware protection: defending against malicious software Security update management: &nbsp;keeping systems patched and up to date &nbsp; Two Levels of Certification Cyber Essentials (CE) A self-assessment questionnaire verified by a certification body. Most businesses can complete this within a few days once the controls are in place.Cyber Essentials Plus (CE+) : The same five controls, but verified by a hands-on technical audit. A higher level of assurance, required for some government contracts and higher-risk sectors.&nbsp; Does My Business Need It? For many London SMBs, the answer is increasingly yes,and here's why.Government and public sector contracts If you supply to the public sector, Cyber Essentials is mandatory for most contracts involving digital services or data handling. The Legal Aid Agency made it a requirement for Standard Crime Contract holders from October 2025. Many NHS organisations and local councils now expect it as standard from their suppliers.Your customers are starting to ask for it It's not just government. Larger businesses are increasingly requiring Cyber Essentials from their suppliers as part of onboarding and due diligence,particularly in finance, legal, healthcare, and real estate. If you're in one of those sectors, expect the question to come up.Cyber insurance Insurers are tightening requirements. Many now ask whether you're Cyber Essentials certified as part of the underwriting process, and certified businesses often benefit from better premiums. Businesses with turnover under £20m who certify their entire organisation also receive £25,000 of free cyber liability insurance included with the certification.It's good baseline security practice Even if none of the above apply to you right now, Cyber Essentials gives you a structured way to check your business is protected against the most common threats, phishing, ransomware, credential attacks. UK businesses saw a 36% year-on-year increase in cyber attacks in 2025.&nbsp; What's Changed in 2026? The scheme was updated in April 2026 with new requirements. The five controls haven't changed, but enforcement has tightened significantly.The biggest change: MFA is now an automatic failure point. If any cloud service your business uses offers multi-factor authentication,whether that's Microsoft 365, your CRM, your accounting software, and you haven't enabled it, your assessment will automatically fail. No exceptions.Cloud services are also now fully in scope. Previously, some businesses excluded cloud platforms from their assessment. That's no longer acceptable under the updated scheme.If you're renewing or applying for the first time, these are the rules you'll be assessed against.&nbsp; How Much Does It Cost? The IASME self-assessment fee is typically £300–£500 + VAT depending on organisation size. The total cost depends on how much remediation your IT setup needs beforehand. For businesses already using Microsoft 365 with MFA properly configured, the path to certification is often straightforward.&nbsp; How Blackgate Tech Can Help We work with London SMBs across finance, hospitality, healthcare, real estate, and law to prepare for and achieve Cyber Essentials certification. We'll review your current setup, identify any gaps, and make sure everything is in place before you go through the assessment.If you'd like a free initial conversation about where your business stands, get in touch, we're happy to take a look.

What Is Cyber Essentials and Does My Business Need It?

<h3>Microsoft Intune makes managing and securing every device in your business simple. Here's what it is, how enrolment works, and why London SMBs should be using it.</h3>Your Staff Are Working From Everywhere. Is Every Device They Use Secure?Your team uses laptops, phones, and tablets to access company emails, files, and systems every day. Some of those devices are in the office. Some are at home. Some are on trains, in coffee shops, and in client meeting rooms across London.Every single one of those devices is a potential entry point for a cyberattack. If one gets lost, stolen, or compromised, your business data could go with it.This is exactly the problem Microsoft Intune was built to solve. And if your business uses Microsoft 365, which most London SMBs do, you may already be paying for it without knowing it.&nbsp; What Is Microsoft Intune?Microsoft Intune is a cloud-based device management platform that gives your IT team, or your IT provider, complete visibility and control over every device that accesses your business systems.With Intune, you can:See every device connected to your business network in one place Push security policies, software updates, and configurations to devices automatically Remotely wipe a lost or stolen device to protect company data Ensure every device meets your security standards before it can access company systems Manage company-owned devices and personal devices used for work (BYOD) It works across Windows, macOS, iOS, and Android, meaning it covers every device your team is likely to use regardless of whether it's a company laptop or a personal iPhone.&nbsp; What Is Device Enrolment and Why Does It Matter?Device enrolment is the process of registering a device with Intune so it can be managed, monitored, and secured. Think of it as checking a device in to your business, once enrolled, you have full visibility and control over it.Until a device is enrolled, it is essentially invisible to your IT team. You have no way of knowing whether it has the latest security updates, whether it has antivirus installed, or whether it is safe to access company data.Enrolment changes that. Once a device is enrolled in Intune, you can:Apply security policies automatically Every enrolled device gets your security settings applied the moment it connects, password requirements, screen lock timers, encryption settings, and more. No manual configuration needed.Control what apps are installed You decide which apps are allowed on enrolled devices. You can push approved apps automatically and block apps that pose a security risk.Keep software up to date Outdated software is one of the most common causes of security breaches. Intune ensures every enrolled device has the latest updates installed, automatically and without relying on individual staff members to remember.Protect company data on personal devices With Intune's Mobile Application Management (MAM), you can protect company data on personal devices without taking control of the whole phone. Company emails and files are kept separate from personal content, and can be wiped remotely without touching personal photos or apps.Remote wipe when a device is lost or stolen If a laptop goes missing or a phone is stolen, you can remotely wipe all company data from that device within minutes. Without Intune, that data is gone with the device.&nbsp; How Device Enrolment Works in Practice Enrolling devices with Intune is simpler than most businesses expect. Here is how the process typically works for a London SMB:Step 1, Set up your Intune environment Your IT provider configures Intune within your Microsoft 365 tenant, setting up the security policies, compliance rules, and app configurations that match your business needs.Step 2, Enrol company-owned devices For company laptops and desktops, enrolment can be done automatically using Windows Autopilot. New devices can be shipped directly to staff and configured automatically when they first switch them on, without any manual IT setup.Step 3, Enrol personal devices Staff who use personal devices for work download the Microsoft Intune Company Portal app and follow a simple guided process to enrol their device. The whole thing takes less than ten minutes and only gives your IT team visibility over work-related activity, not personal content.Step 4, Policies apply automatically Once enrolled, your security policies apply immediately. Updates get pushed, apps get installed, and compliance checks run in the background without any action needed from your staff.Step 5, Ongoing management From the Intune dashboard, your IT provider can see the compliance status of every device at a glance, identify any that fall out of compliance, and take action remotely when needed.&nbsp; Who Needs Microsoft Intune? The honest answer is any business where staff use devices to access company data. But Intune is particularly valuable for:Businesses with remote or hybrid workers When staff work from home or on the move, you lose the natural security of an office network. Intune gives you the visibility and control you'd have in an office, regardless of where your team is working.Businesses using personal devices for work If staff use their own phones or laptops to access company email or files, those devices are outside your control, unless you use Intune. It lets you secure company data on personal devices without invading personal privacy.Businesses in regulated industries If you operate in finance, healthcare, or law, you have compliance obligations around how data is accessed and protected. Intune helps you meet those obligations and provides the audit trail to prove it.Businesses that have experienced a security incident If you've ever had a device lost, stolen, or compromised, you'll know the anxiety of not knowing what data was on it. Intune eliminates that anxiety entirely.&nbsp; Common Questions About Intune Do we already have access to Intune? If your business uses Microsoft 365 Business Premium, you already have access to Intune as part of your subscription. Many businesses are paying for it without using it. Get in touch and we can check your current licence.Will Intune give my employer access to my personal phone? No. When a personal device is enrolled using the Company Portal, your employer can only see and manage work-related apps and data. Personal photos, messages, and apps remain completely private.How long does it take to enrol all our devices? For most small and medium businesses, a full device enrolment project can be completed within a few days. We handle the setup and configuration, and guide your staff through enrolling their own devices with minimal disruption.What happens when a member of staff leaves? When someone leaves your business, we remove their device from Intune and wipe all company data from it remotely. Their access to company systems is revoked immediately, with no risk of them retaining sensitive data.Is Intune only for Windows devices? No. Intune manages Windows, macOS, iOS, and Android devices, meaning it covers every device your team is likely to use.&nbsp; How Blackgate Tech Can Help At Blackgate Tech, we set up and manage Microsoft Intune for small and medium businesses across London. We handle everything from initial configuration and device enrolment to ongoing management and support, all as part of your monthly IT support package.If your business is using Microsoft 365 but hasn't yet enrolled your devices, you are leaving a significant security gap open. We can audit your current setup, check what licences you already have, and get your devices enrolled and secured quickly.&nbsp; Don't Leave Your Devices Unmanaged Every unmanaged device in your business is a risk. A lost laptop, a stolen phone, or a personal device with outdated security software could be all it takes for your business data to end up in the wrong hands.Microsoft Intune closes that gap. And with Blackgate Tech managing it for you, you get complete peace of mind without any of the complexity.

Why Every London Business Should Be Managing Devices with Microsoft Intune

<h3>Discovering Your Business Has Been Hacked Is Terrifying. Here's Exactly What to Do.</h3> It happens more than most people realise. A staff member clicks a suspicious link, a password gets compromised, or ransomware silently encrypts your files overnight. One moment everything is fine, the next your business is in crisis.If you discover your business has been hacked, the next few hours are critical. The actions you take, and the mistakes you avoid, in those first moments can mean the difference between a contained incident and a catastrophic breach.This guide walks you through exactly what to do, step by step, so you can act fast, limit the damage, and get your business back on its feet.&nbsp; Step 1: &nbsp;Don't Panic, But Act Immediately The worst thing you can do when you discover a breach is freeze. The second worst thing is act without thinking and accidentally make things worse.Stay calm and get the right people involved immediately. If you have a managed IT provider, call them first. This is exactly the situation they exist for and they will know what to do.If you don't have an IT provider, keep reading.&nbsp; Step 2: Isolate the Affected Systems The moment you suspect a breach, disconnect the affected devices from your network immediately. Unplug the ethernet cable, turn off Wi-Fi, and isolate any device that may have been compromised.This is critical. Many cyberattacks, particularly ransomware, spread rapidly across networks. Every second a compromised device remains connected gives the attacker more time to move through your systems, encrypt more files, and cause more damage.Do not turn the devices off completely unless instructed to do so by your IT provider. Turning a device off can sometimes destroy forensic evidence needed to understand what happened and how.&nbsp; Step 3: &nbsp;Change Your Passwords Immediately From a clean, unaffected device, change the passwords for every business account you can access. Start with the most critical ones first:Email accounts Microsoft 365 or Google Workspace admin accounts Banking and financial platforms Your website and hosting accounts Any CRM, ATS, or business management software Social media accounts Enable multi-factor authentication on every account if you haven't already. This adds a second layer of security that makes it significantly harder for attackers to maintain access even if they have your password.&nbsp; Step 4: Assess What Has Been Compromised Once the immediate threat is contained, you need to understand the scope of the breach. Work with your IT provider or a cybersecurity specialist to establish:Which systems and devices were affected What data may have been accessed, stolen, or encrypted How the attacker got in How long the breach may have been active before it was discovered Whether the attacker still has access to any part of your systems This information is critical not just for recovering your systems, but for fulfilling your legal obligations under UK GDPR.&nbsp; Step 5: Report the Breach If Required Under UK GDPR, if personal data has been compromised in a breach, you are legally required to report it to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it. Failing to report a notifiable breach can result in significant fines on top of the damage already caused by the attack itself.You may also need to notify affected individuals if the breach is likely to result in a high risk to their rights and freedoms, for example if financial data, medical records, or sensitive personal information has been exposed.If you are unsure whether your breach is notifiable, the ICO's website has clear guidance on what qualifies as a notifiable breach.&nbsp; Step 6: Restore From Backups If your data has been encrypted by ransomware or deleted by an attacker, your backups are your lifeline. This is why having a reliable, regularly tested backup solution is one of the most important investments any business can make in its IT.A good backup solution means:Your data is backed up automatically every day Backups are stored separately from your main systems so ransomware can't reach them You can restore your data quickly and completely without paying a ransom If you don't have backups, or your backups were also compromised, recovery becomes significantly more complex, time-consuming, and expensive. In some cases, data may be permanently lost.&nbsp; Step 7: Do Not Pay the Ransom If you have been hit by ransomware and are being asked to pay to recover your files, our strong advice is do not pay.Paying the ransom does not guarantee you will get your data back. It does not guarantee the attacker will not publish your data anyway. And it marks your business as a target willing to pay, making you more likely to be attacked again in the future.Work with your IT provider and, if necessary, a specialist cyber incident response team to explore all recovery options before considering payment.&nbsp; Step 8: Communicate With Your Team and Clients Your team needs to know what happened, what systems are affected, and what they should and should not do while recovery is underway. Clear internal communication prevents panic and stops staff from accidentally making things worse.If client data has been compromised, you have both a legal and ethical obligation to let them know. Be clear about what happened, what data was involved, what you are doing to fix it, and what steps you are taking to prevent it happening again.&nbsp;Step 9: &nbsp;Conduct a Full Post-Incident Review Once the crisis is over, conduct a thorough review of what happened and why. Work with your IT provider to understand:How the attacker got in What security gaps existed that allowed the breach to happen What could have been done to detect it sooner What changes need to be made to prevent it happening again This review should result in a concrete action plan, not just a list of observations. Every gap identified should have a clear owner, a timeline, and a resolution.&nbsp; Step 10: Strengthen Your Defences A cyberattack is a painful experience. But it is also an opportunity to build a significantly stronger security posture than you had before. Use the lessons learned from the incident to implement the protections that should have been in place already:Multi-factor authentication on all accounts Endpoint protection on every device Regular security awareness training for all staff Automated, offsite backups tested regularly Device management with Microsoft Intune Email security filtering A clear incident response plan so you know exactly what to do if it happens again &nbsp; How Blackgate Tech Can HelpAt Blackgate Tech, we help London businesses respond to cyber incidents, recover their systems, and build the defences needed to prevent future attacks. If your business has been compromised, call us immediately. We respond fast, work methodically, and get you back on your feet as quickly as possible.We also help businesses that have never been attacked put the right protections in place before an incident occurs, because prevention is always faster, cheaper, and less stressful than recovery.

What to do if your business gets hacked

<h3>The UK Is Switching Off Traditional Phone Lines in 2027. Here's What Your Business Needs to Know.</h3><h3> If your business still uses a traditional landline, you need to read this. BT Openreach is switching off the UK's old copper telephone network,known as the PSTN (Public Switched Telephone Network) and ISDN, by January 2027. When that happens, every business and household still relying on a traditional phone line will lose their service overnight.</h3>This isn't a distant concern. With the deadline less than 1 year away, businesses that haven't already made the switch to VoIP (Voice over Internet Protocol) need to start planning now.&nbsp; What Is the PSTN Switch-Off? The PSTN is the traditional copper wire telephone network that has been the backbone of UK communication for over a century. BT Openreach announced that this ageing infrastructure will be permanently decommissioned by January 2027, replaced entirely by digital, internet-based communication.If your business uses any of the following, you are affected:Traditional landline phones ISDN lines for voice or data Fax machines connected to phone lines Alarm systems or door entry systems connected to the phone network Payment terminals connected via phone line Broadband delivered over copper phone lines (ADSL) &nbsp; What Is VoIP and Why Is It the Replacement? VoIP stands for Voice over Internet Protocol. Instead of sending voice calls over copper wires, VoIP converts your voice into digital data and sends it over your internet connection, the same way an email or a video call works.Modern VoIP systems are more flexible, more feature-rich, and often significantly cheaper than traditional phone systems. They allow your team to make and receive calls from any device: desk phone, laptop, or mobile, from anywhere with an internet connection.For businesses that have already made the switch, VoIP has become an essential part of how they operate. For those that haven't, the 2027 deadline is the nudge they need.&nbsp; What Happens If You Don't Switch in Time? Simply put, your phones stop working. When BT Openreach decommissions the PSTN, any device still connected to the old copper network will lose service completely. There will be no grace period and no fallback option.Beyond losing phone service, businesses that leave the switch too late also risk:Rushed migrations: Last-minute moves increase the risk of errors, downtime, and data loss. The closer to the deadline, the more pressure there is on engineers and providers, meaning longer wait times and less flexibility.Disruption to other systems: Many businesses don't realise how many systems beyond their phones rely on the PSTN. Alarm systems, door entry, CCTV, and payment terminals connected to old phone lines will all be affected.Missed cost savings: Businesses that switch early benefit from lower call costs, reduced line rental, and the ability to scale their phone system up or down without expensive hardware changes.&nbsp; The Benefits of Switching to VoIP Now Lower costs: VoIP calls are significantly cheaper than traditional landline calls, particularly for international calls. There are no line rental fees, and adding new users is simply a matter of software rather than physical installation.Work from anywhere: Your team can make and receive business calls from their laptop or mobile using the same number, whether they're in the office, at home, or with a client. This is particularly valuable for businesses with hybrid or remote workers.More features, more flexibility Modern VoIP systems come with features that traditional phone systems simply can't match: &nbsp;call recording, auto-attendant, call routing, voicemail to email, video calling, and detailed call analytics.Easy to scale Adding a new team member to a traditional phone system means new hardware and an engineer visit. With VoIP, it takes minutes. The same applies to removing users, changing numbers, or setting up a new office location.One provider for phones and IT When your phone system runs over your internet connection, it makes sense to have your IT provider manage it. At Blackgate Tech, we manage VoIP alongside your broader IT infrastructure, meaning fewer suppliers, fewer invoices, and a single point of contact when something needs attention.<h3>&nbsp; What to Do Before the 2027 Deadline</h3> 1. Audit your current phone setup Start by identifying every device and system in your business that connects to the phone network. This includes phones, fax machines, alarms, door entry systems, and payment terminals.2. Check your broadband connection VoIP requires a reliable, fast internet connection. If your broadband is currently delivered over copper ADSL, you'll need to upgrade to fibre before or alongside your VoIP migration.3. Choose a VoIP provider There are many VoIP providers in the market. Look for one that offers reliable uptime, good support, and a system that integrates with the way your business already works.4. Plan your migration carefully A VoIP migration doesn't have to mean downtime. With the right planning, you can switch over seamlessly without your team or your customers noticing any disruption.5. Don't leave it to the last minute The closer to January 2027 the deadline gets, the busier engineers and providers will be. Businesses that plan early get more choice, better pricing, and a smoother transition.<h3>&nbsp; How Blackgate Tech Can Help</h3> At Blackgate Tech, we help small and medium businesses across London plan and execute their move to VoIP before the 2027 deadline. We handle everything from auditing your current setup and recommending the right system, to managing the full migration and providing ongoing support once you're live.We also manage your VoIP system as part of your broader IT support, so your phones, your network, and your devices are all looked after by one team, with one monthly cost and one number to call when you need help.

UK PSTN Switch-Off 2027. Is Your Business Ready?

If you've been Googling "how much does IT support cost in London," you're not alone. It's one of the first questions every small business owner asks, and one of the hardest to get a straight answer on.Most IT companies bury their pricing or give vague answers like "it depends." At Blackgate Tech, we believe transparency builds trust. So in this guide, we'll break down exactly what managed IT support costs in London in 2026, what affects the price, and how to know whether you're getting good value.&nbsp; The Short Answer: What Does Managed IT Support Cost in London? For small and medium businesses in London, managed IT support typically costs £35–£140 per user per month for a fully managed service. Here's a quick breakdown by service type:Service Type Typical Cost Break-fix / Ad-hoc £75–£150 per hour Basic monitoring &amp; security only £35–£50 per user/month Fully managed IT support £70–£140 per user/month Monthly package (small team) £250–£600/month So for a London business with 10 employees on a fully managed plan, you'd typically pay £500–£1,400 per month,covering unlimited support, monitoring, cybersecurity, backups, and cloud management.&nbsp; What Affects the Price? Not all IT support quotes are equal. Here are the key factors that push costs up or down:1. Number of Users Most MSPs in London price per user per month. The more users you have, the more you pay,but the per-user rate often decreases as you scale.2. Level of Service There's a big difference between basic helpdesk cover and a fully managed service that includes proactive monitoring, cybersecurity, backups, and strategic IT guidance. Make sure you're comparing like for like.3. Your Industry If you operate in finance, healthcare, or legal services, compliance requirements mean more work, and higher costs. Expect to pay a premium of 20–35% for compliance-heavy environments.4. On-site vs. Remote Support Remote-only support is cheaper. If you need an engineer on-site regularly, factor in travel time and call-out fees.5. Response Time Guarantees A provider promising a 4-hour response will cost less than one guaranteeing a 20-minute response. For most London SMBs, a 1–2 hour response SLA is a good balance of cost and reliability.&nbsp; Break-Fix vs. Managed IT: Which Costs Less? This is where many small businesses get caught out. Break-fix (pay-as-you-go IT support) seems cheaper on paper — you only pay when something goes wrong. But in practice, it almost always costs more.Here's why:Unpredictable bills: one serious incident can cost thousands No proactive monitoring: problems aren't caught before they cause downtime No cybersecurity: you're exposed to threats that a managed service would prevent Lost productivity: every hour your team can't work costs real money A managed IT contract gives you a fixed monthly cost, proactive support, and the peace of mind that your systems are being looked after around the clock.&nbsp; Is Managed IT Support Worth It for a Small London Business? Let's put it in perspective. The average cost of hiring one in-house IT person in London is £35,000–£55,000 per year, and that's one person, with gaps in knowledge, holidays, and sick days.A fully managed IT service for a 10-person London business might cost £6,400–£16,800 per year,and you get an entire team of specialists covering cybersecurity, cloud, networking, helpdesk, and strategic IT guidance.The maths is clear for most small businesses.&nbsp; What Should Be Included in a Managed IT Contract? When comparing quotes, make sure these are included as standard, not extras:Unlimited remote support (during business hours at minimum) Proactive system monitoring (24/7 ideally) Patch management and updates Antivirus and endpoint security Daily backups with tested recovery Microsoft 365 or Google Workspace management Cybersecurity awareness If a provider is charging separately for any of these, the headline price is misleading.&nbsp; Watch Out for Hidden Costs Some MSPs advertise low per-user rates but charge extra for:Emergency or out-of-hours support On-site visits New device setup Software licences Project work (office moves, new server setup, etc.) Always ask for a full breakdown and check the small print before signing.&nbsp; How Blackgate Tech Prices Our Services At Blackgate Tech, we offer transparent, predictable pricing for small and medium businesses across London. No hidden fees. No long-term lock-ins. No surprises.Our managed IT packages are designed for teams of 10–100 users and include everything from helpdesk support and cybersecurity to cloud management and strategic IT guidance, all for a single fixed monthly fee.<h3>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a title="Contact Us" href="https://blackgate-tech.co.uk/contact" target="_blank" rel="noopener" data-mce-href="https://blackgate-tech.co.uk/contact">Contact Us</a></h3>

How Much Does Managed IT Support Cost for Small and Medium Businesses in London?

Blackgate Tech

Blackgate Tech is London‑based Managed Service Provider that delivers modern, trustworthy IT solutions for small businesses with 5–50 users. Offering help‑desk support, endpoint protection, Microsoft 365 and cloud management, backups, disaster recovery and VoIP, Blackgate combines professional, friendly service with a strong security focus.

Blog

What Is Cyber Essentials and Does My Business Need It?

Why Every London Business Should Be Managing Devices with...

What to do if your business gets hacked

UK PSTN Switch-Off 2027. Is Your Business Ready?

How Much Does Managed IT Support Cost for Small and Mediu...