Banner

Need essential best practices deployed to protect your organization and meet cyber insurance and compliance requirements? Blackgate Tech includes foundational cybersecurity tools and solutions as part of our managed services.

Cybersecurity Services

Wide angle of sun setting over London Gherkin

List

Smart security for everyday business

Advanced threat detection 
We use AI-driven monitoring tools to continuously analyse activity across your systems. Whether it's ransomware, malware, or a compromised account, we identify and respond to threats fast.

Advanced Threat Detection

Network Security
Protect your network from intrusions, malware, and other threats with comprehensive network security. We offer firewall management, intrusion detection, and prevention systems to keep your data safe.

Computer network security cyber connection future technology information safety data protection encryption

Firewall management

Email security 
We layer spam filtering, phishing detection, and malicious link and attachment scanning on top of your existing email setup.

Email security 

Patch and vulnerability management 
We automate updates across your operating systems and applications so known vulnerabilities are closed quickly.

Patch and vulnerability management

Security awareness training 
We run regular security awareness training and simulated phishing campaigns so your staff know what to look for, how to react, and how to avoid becoming the reason your business gets compromised.

Endpoint Detection &amp; Response (EDR)
EDR monitors process behaviour, memory activity, and network connections in real time across every endpoint, so it catches threats that have never been catalogued.

Organizations turn to us when they

Have limited insight into their cybersecurity health and ransomware risk

Digital E-Invoice and Statement Software for Online Transactions.Payment and Billing Invoices Business Financial Operations concept.

Have no internal security resources to confirm threats or remediate security problems

Cyber security. Man using laptop at table, closeup

Have been impacted by a data breach and are unsure what attackers accessed or used

Businesswoman touch network using icon technology with virtual screen icons, Technology, business support, innovation concept.

Contact form

<h3>Get in touch</h3>
 Send us a message and we'll get back to you as soon as we can.

name

email

phone

message

Recent blog posts

<h3> If you run a small or medium-sized business in London, chances are you've come across the term Cyber Essentials,&nbsp;maybe from a supplier, an insurance company, or a government contract requirement. But what actually is it, and do you need it?</h3>What Is Cyber Essentials? Cyber Essentials is a UK government-backed cybersecurity certification scheme, run by the National Cyber Security Centre (NCSC) and IASME. It's designed to help businesses of all sizes protect themselves against the most common types of cyberattack.It's not a complex, expensive enterprise standard. It's a practical baseline, five core controls that, if properly implemented, protect against around 80% of the common attacks targeting UK businesses.The five controls are:Firewalls: protecting your network Secure configuration: &nbsp;making sure devices and software are set up securely User access control: limiting who can access what Malware protection: defending against malicious software Security update management: &nbsp;keeping systems patched and up to date &nbsp; Two Levels of Certification Cyber Essentials (CE) A self-assessment questionnaire verified by a certification body. Most businesses can complete this within a few days once the controls are in place.Cyber Essentials Plus (CE+) : The same five controls, but verified by a hands-on technical audit. A higher level of assurance, required for some government contracts and higher-risk sectors.&nbsp; Does My Business Need It? For many London SMBs, the answer is increasingly yes,and here's why.Government and public sector contracts If you supply to the public sector, Cyber Essentials is mandatory for most contracts involving digital services or data handling. The Legal Aid Agency made it a requirement for Standard Crime Contract holders from October 2025. Many NHS organisations and local councils now expect it as standard from their suppliers.Your customers are starting to ask for it It's not just government. Larger businesses are increasingly requiring Cyber Essentials from their suppliers as part of onboarding and due diligence,particularly in finance, legal, healthcare, and real estate. If you're in one of those sectors, expect the question to come up.Cyber insurance Insurers are tightening requirements. Many now ask whether you're Cyber Essentials certified as part of the underwriting process, and certified businesses often benefit from better premiums. Businesses with turnover under £20m who certify their entire organisation also receive £25,000 of free cyber liability insurance included with the certification.It's good baseline security practice Even if none of the above apply to you right now, Cyber Essentials gives you a structured way to check your business is protected against the most common threats, phishing, ransomware, credential attacks. UK businesses saw a 36% year-on-year increase in cyber attacks in 2025.&nbsp; What's Changed in 2026? The scheme was updated in April 2026 with new requirements. The five controls haven't changed, but enforcement has tightened significantly.The biggest change: MFA is now an automatic failure point. If any cloud service your business uses offers multi-factor authentication,whether that's Microsoft 365, your CRM, your accounting software, and you haven't enabled it, your assessment will automatically fail. No exceptions.Cloud services are also now fully in scope. Previously, some businesses excluded cloud platforms from their assessment. That's no longer acceptable under the updated scheme.If you're renewing or applying for the first time, these are the rules you'll be assessed against.&nbsp; How Much Does It Cost? The IASME self-assessment fee is typically £300–£500 + VAT depending on organisation size. The total cost depends on how much remediation your IT setup needs beforehand. For businesses already using Microsoft 365 with MFA properly configured, the path to certification is often straightforward.&nbsp; How Blackgate Tech Can Help We work with London SMBs across finance, hospitality, healthcare, real estate, and law to prepare for and achieve Cyber Essentials certification. We'll review your current setup, identify any gaps, and make sure everything is in place before you go through the assessment.If you'd like a free initial conversation about where your business stands, get in touch, we're happy to take a look.

What Is Cyber Essentials and Does My Business Need It?

<h3>Microsoft Intune makes managing and securing every device in your business simple. Here's what it is, how enrolment works, and why London SMBs should be using it.</h3>Your Staff Are Working From Everywhere. Is Every Device They Use Secure?Your team uses laptops, phones, and tablets to access company emails, files, and systems every day. Some of those devices are in the office. Some are at home. Some are on trains, in coffee shops, and in client meeting rooms across London.Every single one of those devices is a potential entry point for a cyberattack. If one gets lost, stolen, or compromised, your business data could go with it.This is exactly the problem Microsoft Intune was built to solve. And if your business uses Microsoft 365, which most London SMBs do, you may already be paying for it without knowing it.&nbsp; What Is Microsoft Intune?Microsoft Intune is a cloud-based device management platform that gives your IT team, or your IT provider, complete visibility and control over every device that accesses your business systems.With Intune, you can:See every device connected to your business network in one place Push security policies, software updates, and configurations to devices automatically Remotely wipe a lost or stolen device to protect company data Ensure every device meets your security standards before it can access company systems Manage company-owned devices and personal devices used for work (BYOD) It works across Windows, macOS, iOS, and Android, meaning it covers every device your team is likely to use regardless of whether it's a company laptop or a personal iPhone.&nbsp; What Is Device Enrolment and Why Does It Matter?Device enrolment is the process of registering a device with Intune so it can be managed, monitored, and secured. Think of it as checking a device in to your business, once enrolled, you have full visibility and control over it.Until a device is enrolled, it is essentially invisible to your IT team. You have no way of knowing whether it has the latest security updates, whether it has antivirus installed, or whether it is safe to access company data.Enrolment changes that. Once a device is enrolled in Intune, you can:Apply security policies automatically Every enrolled device gets your security settings applied the moment it connects, password requirements, screen lock timers, encryption settings, and more. No manual configuration needed.Control what apps are installed You decide which apps are allowed on enrolled devices. You can push approved apps automatically and block apps that pose a security risk.Keep software up to date Outdated software is one of the most common causes of security breaches. Intune ensures every enrolled device has the latest updates installed, automatically and without relying on individual staff members to remember.Protect company data on personal devices With Intune's Mobile Application Management (MAM), you can protect company data on personal devices without taking control of the whole phone. Company emails and files are kept separate from personal content, and can be wiped remotely without touching personal photos or apps.Remote wipe when a device is lost or stolen If a laptop goes missing or a phone is stolen, you can remotely wipe all company data from that device within minutes. Without Intune, that data is gone with the device.&nbsp; How Device Enrolment Works in Practice Enrolling devices with Intune is simpler than most businesses expect. Here is how the process typically works for a London SMB:Step 1, Set up your Intune environment Your IT provider configures Intune within your Microsoft 365 tenant, setting up the security policies, compliance rules, and app configurations that match your business needs.Step 2, Enrol company-owned devices For company laptops and desktops, enrolment can be done automatically using Windows Autopilot. New devices can be shipped directly to staff and configured automatically when they first switch them on, without any manual IT setup.Step 3, Enrol personal devices Staff who use personal devices for work download the Microsoft Intune Company Portal app and follow a simple guided process to enrol their device. The whole thing takes less than ten minutes and only gives your IT team visibility over work-related activity, not personal content.Step 4, Policies apply automatically Once enrolled, your security policies apply immediately. Updates get pushed, apps get installed, and compliance checks run in the background without any action needed from your staff.Step 5, Ongoing management From the Intune dashboard, your IT provider can see the compliance status of every device at a glance, identify any that fall out of compliance, and take action remotely when needed.&nbsp; Who Needs Microsoft Intune? The honest answer is any business where staff use devices to access company data. But Intune is particularly valuable for:Businesses with remote or hybrid workers When staff work from home or on the move, you lose the natural security of an office network. Intune gives you the visibility and control you'd have in an office, regardless of where your team is working.Businesses using personal devices for work If staff use their own phones or laptops to access company email or files, those devices are outside your control, unless you use Intune. It lets you secure company data on personal devices without invading personal privacy.Businesses in regulated industries If you operate in finance, healthcare, or law, you have compliance obligations around how data is accessed and protected. Intune helps you meet those obligations and provides the audit trail to prove it.Businesses that have experienced a security incident If you've ever had a device lost, stolen, or compromised, you'll know the anxiety of not knowing what data was on it. Intune eliminates that anxiety entirely.&nbsp; Common Questions About Intune Do we already have access to Intune? If your business uses Microsoft 365 Business Premium, you already have access to Intune as part of your subscription. Many businesses are paying for it without using it. Get in touch and we can check your current licence.Will Intune give my employer access to my personal phone? No. When a personal device is enrolled using the Company Portal, your employer can only see and manage work-related apps and data. Personal photos, messages, and apps remain completely private.How long does it take to enrol all our devices? For most small and medium businesses, a full device enrolment project can be completed within a few days. We handle the setup and configuration, and guide your staff through enrolling their own devices with minimal disruption.What happens when a member of staff leaves? When someone leaves your business, we remove their device from Intune and wipe all company data from it remotely. Their access to company systems is revoked immediately, with no risk of them retaining sensitive data.Is Intune only for Windows devices? No. Intune manages Windows, macOS, iOS, and Android devices, meaning it covers every device your team is likely to use.&nbsp; How Blackgate Tech Can Help At Blackgate Tech, we set up and manage Microsoft Intune for small and medium businesses across London. We handle everything from initial configuration and device enrolment to ongoing management and support, all as part of your monthly IT support package.If your business is using Microsoft 365 but hasn't yet enrolled your devices, you are leaving a significant security gap open. We can audit your current setup, check what licences you already have, and get your devices enrolled and secured quickly.&nbsp; Don't Leave Your Devices Unmanaged Every unmanaged device in your business is a risk. A lost laptop, a stolen phone, or a personal device with outdated security software could be all it takes for your business data to end up in the wrong hands.Microsoft Intune closes that gap. And with Blackgate Tech managing it for you, you get complete peace of mind without any of the complexity.

Why Every London Business Should Be Managing Devices with Microsoft Intune

<h3>Discovering Your Business Has Been Hacked Is Terrifying. Here's Exactly What to Do.</h3> It happens more than most people realise. A staff member clicks a suspicious link, a password gets compromised, or ransomware silently encrypts your files overnight. One moment everything is fine, the next your business is in crisis.If you discover your business has been hacked, the next few hours are critical. The actions you take, and the mistakes you avoid, in those first moments can mean the difference between a contained incident and a catastrophic breach.This guide walks you through exactly what to do, step by step, so you can act fast, limit the damage, and get your business back on its feet.&nbsp; Step 1: &nbsp;Don't Panic, But Act Immediately The worst thing you can do when you discover a breach is freeze. The second worst thing is act without thinking and accidentally make things worse.Stay calm and get the right people involved immediately. If you have a managed IT provider, call them first. This is exactly the situation they exist for and they will know what to do.If you don't have an IT provider, keep reading.&nbsp; Step 2: Isolate the Affected Systems The moment you suspect a breach, disconnect the affected devices from your network immediately. Unplug the ethernet cable, turn off Wi-Fi, and isolate any device that may have been compromised.This is critical. Many cyberattacks, particularly ransomware, spread rapidly across networks. Every second a compromised device remains connected gives the attacker more time to move through your systems, encrypt more files, and cause more damage.Do not turn the devices off completely unless instructed to do so by your IT provider. Turning a device off can sometimes destroy forensic evidence needed to understand what happened and how.&nbsp; Step 3: &nbsp;Change Your Passwords Immediately From a clean, unaffected device, change the passwords for every business account you can access. Start with the most critical ones first:Email accounts Microsoft 365 or Google Workspace admin accounts Banking and financial platforms Your website and hosting accounts Any CRM, ATS, or business management software Social media accounts Enable multi-factor authentication on every account if you haven't already. This adds a second layer of security that makes it significantly harder for attackers to maintain access even if they have your password.&nbsp; Step 4: Assess What Has Been Compromised Once the immediate threat is contained, you need to understand the scope of the breach. Work with your IT provider or a cybersecurity specialist to establish:Which systems and devices were affected What data may have been accessed, stolen, or encrypted How the attacker got in How long the breach may have been active before it was discovered Whether the attacker still has access to any part of your systems This information is critical not just for recovering your systems, but for fulfilling your legal obligations under UK GDPR.&nbsp; Step 5: Report the Breach If Required Under UK GDPR, if personal data has been compromised in a breach, you are legally required to report it to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it. Failing to report a notifiable breach can result in significant fines on top of the damage already caused by the attack itself.You may also need to notify affected individuals if the breach is likely to result in a high risk to their rights and freedoms, for example if financial data, medical records, or sensitive personal information has been exposed.If you are unsure whether your breach is notifiable, the ICO's website has clear guidance on what qualifies as a notifiable breach.&nbsp; Step 6: Restore From Backups If your data has been encrypted by ransomware or deleted by an attacker, your backups are your lifeline. This is why having a reliable, regularly tested backup solution is one of the most important investments any business can make in its IT.A good backup solution means:Your data is backed up automatically every day Backups are stored separately from your main systems so ransomware can't reach them You can restore your data quickly and completely without paying a ransom If you don't have backups, or your backups were also compromised, recovery becomes significantly more complex, time-consuming, and expensive. In some cases, data may be permanently lost.&nbsp; Step 7: Do Not Pay the Ransom If you have been hit by ransomware and are being asked to pay to recover your files, our strong advice is do not pay.Paying the ransom does not guarantee you will get your data back. It does not guarantee the attacker will not publish your data anyway. And it marks your business as a target willing to pay, making you more likely to be attacked again in the future.Work with your IT provider and, if necessary, a specialist cyber incident response team to explore all recovery options before considering payment.&nbsp; Step 8: Communicate With Your Team and Clients Your team needs to know what happened, what systems are affected, and what they should and should not do while recovery is underway. Clear internal communication prevents panic and stops staff from accidentally making things worse.If client data has been compromised, you have both a legal and ethical obligation to let them know. Be clear about what happened, what data was involved, what you are doing to fix it, and what steps you are taking to prevent it happening again.&nbsp;Step 9: &nbsp;Conduct a Full Post-Incident Review Once the crisis is over, conduct a thorough review of what happened and why. Work with your IT provider to understand:How the attacker got in What security gaps existed that allowed the breach to happen What could have been done to detect it sooner What changes need to be made to prevent it happening again This review should result in a concrete action plan, not just a list of observations. Every gap identified should have a clear owner, a timeline, and a resolution.&nbsp; Step 10: Strengthen Your Defences A cyberattack is a painful experience. But it is also an opportunity to build a significantly stronger security posture than you had before. Use the lessons learned from the incident to implement the protections that should have been in place already:Multi-factor authentication on all accounts Endpoint protection on every device Regular security awareness training for all staff Automated, offsite backups tested regularly Device management with Microsoft Intune Email security filtering A clear incident response plan so you know exactly what to do if it happens again &nbsp; How Blackgate Tech Can HelpAt Blackgate Tech, we help London businesses respond to cyber incidents, recover their systems, and build the defences needed to prevent future attacks. If your business has been compromised, call us immediately. We respond fast, work methodically, and get you back on your feet as quickly as possible.We also help businesses that have never been attacked put the right protections in place before an incident occurs, because prevention is always faster, cheaper, and less stressful than recovery.

What to do if your business gets hacked

Blackgate Tech

Blackgate Tech is London‑based Managed Service Provider that delivers modern, trustworthy IT solutions for small businesses with 5–50 users. Offering help‑desk support, endpoint protection, Microsoft 365 and cloud management, backups, disaster recovery and VoIP, Blackgate combines professional, friendly service with a strong security focus.