Baseline Cyber Security, London
Practical cyber security, Cyber Essentials readiness, and modern workplace IT for small businesses. Delivered by someone who's spent nearly two decades keeping the lights on for much larger ones.
Why "baseline"
Most small businesses get "IT support": someone who turns up when something breaks. Few get a defined, documented baseline for their identity, devices and data: the thing insurers ask about after an incident, and the thing Cyber Essentials actually assesses. I set that baseline, get you certified against it, and keep it from drifting.
What's covered
Email Security Review
SPF, DKIM and DMARC checked and fixed, with a safe, monitored DMARC rollout so legitimate mail doesn't get blocked.
Cyber Essentials readiness assessment
Gap analysis against the five technical controls, fixed before you submit.
Cyber Essentials Plus preparation
Hardening and evidence-gathering ahead of an external audit.
Security baseline & hardening review
Identity, endpoint and email configuration checked against a defined baseline, not a checklist.
Penetration test remediation
Findings translated into a prioritised, fundable fix list. Then the fixes get carried out.
Microsoft Intune deployment
Enrolment, compliance policy and app management for company and BYOD devices.
Conditional Access design
Access rules that hold up to an audit without locking your own team out.
Microsoft 365 administration
Teams, SharePoint, Exchange and OneDrive configured and kept that way.
Microsoft 365 Copilot governance
Rollout and data-access controls before Copilot sees anything it shouldn't.
Managed patch management
Every device enrolled onto automatic patching, checked and kept current, with failed updates caught before they cause a problem.
Power Automate workflows
Starter/leaver processes, approvals and document handling, built to survive staff turnover.
Azure Logic Apps workflows
Automated cloud workflows that connect your business systems and run reliably in the background.
System integrations
Software systems linked together so nothing needs entering twice.
Power BI dashboards
Business data pulled into one live dashboard instead of scattered across spreadsheets and exports.
IT process documentation
The runbooks that mean it doesn't all live in one person's head.
Fractional IT / security advisory
A senior second opinion on vendor choices and technology roadmap without a full-time hire.
Retained monthly support
A fixed number of hours held for you each month: planned work, not just firefighting.
What it costs
A structured scan of your Microsoft 365 and Entra ID setup against Microsoft and CISA security baselines. You get a plain-English report: what's misconfigured, what it risks, and what to fix first.
Documented handover, +£150
A branded, polished record of your current Microsoft 365 and Intune setup. Useful to keep on file, hand to a new hire, or show an insurer or auditor.
SPF, DKIM and DMARC checked and fixed, the DNS records that stop someone else sending email that looks like it's from you. Includes a safe, monitored DMARC rollout so legitimate email doesn't get blocked along the way. Try the free instant check first if you just want a quick read on where you stand.
One-off £95
Implementation and monitoring, +£150
DNS changes made and the DMARC rollout monitored over the following weeks, moving from monitoring to full enforcement without breaking legitimate mail.
Gap analysis (half-day)
This doesn't include the IASME certification fee itself, which is paid directly to the certification body. Currently £300-£500 +VAT depending on your company size.
Full readiness & remediation
From £750
Scoped after the gap analysis once we know what actually needs fixing.
This doesn't include the IASME certification fee itself, which is paid directly to the certification body. Currently £300-£500 +VAT depending on your company size.
Missing patches are one of the most common ways small businesses get breached. I enrol every device onto managed patching, check it weekly, and step in when an update fails or causes a problem.
Onboarding
One-off £150
Deployment and patch policy setup across your existing devices.
Ongoing monitoring
Figures above are indicative. Confirmed after a short review of your devices and any tools already in place.
Retainer support: from £250/month for a fixed block of hours each month. Exact scope agreed after an initial conversation.
How it works
A structured review of where you actually stand today: identity, devices, email, backups, and Cyber Essentials scope. You get a written report, not a sales pitch.
Findings ranked by risk and effort, with a realistic timeline and cost. So you know what you're saying yes to before you say it.
The fixes get made. If a specialist tool or third party is genuinely the better answer, I'll say so rather than build a workaround just to avoid it.
Ongoing retainer to keep configuration from drifting, keep certifications current, and be a phone call away when something breaks.
About
Baseline Cyber Security is founder-led. Nearly 20 years in IT, most recently managing Microsoft 365, Intune and identity security for a large organisation. That experience is now applied directly to small businesses at a fraction of the cost of an in-house IT department.
Every engagement is delivered personally. No account handovers, no junior bench.
Get in touch
Tell me about your business and what's prompted the enquiry. It might be an insurer asking for Cyber Essentials, a client requiring it, or you just wanting IT that works properly. I'll reply within one working day.