Specialist / Security

Security that fits the business.

Most attacks on small businesses aren’t sophisticated — they find the account without multi-factor sign-in, the unpatched laptop, the backup nobody tested. I help you close those gaps first, then go as deep as your business actually needs.

01 / What’s covered

Layer by layer.

Good security isn’t one product. It’s a handful of things done properly, each one making the others stronger.

SEC-01.1

Security health check

An honest look at where your business is exposed, with findings in plain English and a prioritised list of what to fix.

  • Accounts, devices & network review
  • Backup & recovery check
  • Prioritised action plan
SEC-01.2

Accounts & access

Most breaches start with a stolen password. Lock down who can get in, and what they can do once they’re there.

  • Multi-factor sign-in & password managers
  • Microsoft 365 / Google Workspace hardening
  • Admin rights & leaver processes
SEC-01.3

Network security

Firewalls configured properly, guests kept off the business network, and cameras and smart devices kept in their own lane.

  • Firewall setup & review
  • Segmented networks (VLANs)
  • Secure remote access & site-to-site VPN
SEC-01.4

Device protection

Laptops, desktops and phones that update themselves, encrypt their data and can be locked or wiped if lost.

  • Patching & update management
  • Disk encryption
  • Endpoint protection
SEC-01.5

Email security

Make it harder for criminals to impersonate you, and easier for your team to spot a phishing email before it’s clicked.

  • SPF, DKIM & DMARC setup
  • Filtering & safe-link settings
  • Practical phishing awareness
SEC-01.6

Backup & recovery

A backup only counts if it restores. Build a setup that survives ransomware, hardware failure and honest mistakes.

  • Off-site & offline copies
  • Tested restores
  • Incident help & recovery

02 / Simple to complex

As deep as
you need to go.

A sole trader and a multi-site business need different things. Start with the essentials and build from there.

LEVEL 01

Essentials

The basics that stop most everyday attacks.

  • Multi-factor sign-in on key accounts
  • A password manager
  • Automatic updates
  • Backups that actually restore
LEVEL 02

Business

A consistent baseline across people and devices.

  • Microsoft 365 / Google Workspace security baseline
  • Business-grade firewall
  • Separate guest & device networks
  • Email authentication (SPF, DKIM, DMARC)
  • Starter & leaver processes
LEVEL 03

Advanced

For complex sites, sensitive data or multiple locations.

  • Network segmentation & VLAN design
  • Site-to-site VPN & hardened remote access
  • Logging & monitoring
  • Cyber Essentials readiness
  • Incident response & recovery planning

03 / How a project runs

Methodical.
Never mysterious.

Bigger jobs follow a clear path, so you always know what’s happening, why, and what it costs.

  1. STEP 01

    Understand

    What you have, what you rely on, and what would hurt most if it went wrong.

  2. STEP 02

    Plan

    Prioritised recommendations with clear costs. You decide what goes ahead.

  3. STEP 03

    Implement

    Changes made carefully, tested, and with minimal disruption to your day.

  4. STEP 04

    Hand over

    Documentation in plain English, plus guidance for you and your team.

Security questions

Straight
answers.

Is my business really a target?

Most attacks aren’t personal. They’re automated, looking for any weak account or unpatched system. Small businesses are often hit precisely because they’re assumed to be easier. The good news: the basics stop a large share of them.

Can you help with Cyber Essentials?

Yes — I can help you understand the requirements, get the right controls in place and prepare for assessment. The certificate itself is issued through an accredited certification body.

Something’s already gone wrong. Can you help?

Get in touch straight away. The priority is to contain the problem, understand what happened, and get you back up and running — then close the gap so it doesn’t happen again.

Will this make my IT harder to use?

It shouldn’t. Good security is mostly invisible day to day. The aim is protection that fits how you work, not a wall of hoops to jump through.

Start with a conversation

Let’s find the gaps
before someone else does.

Tell me a little about your business and what worries you.
We’ll work out the right starting point together.

arrive@alteracore.net

Dumfries & the surrounding areas