If nobody's job is IT, make it ours
In a lot of good businesses, IT is whoever is best with computers doing it on top of their real work. That holds until it doesn't, and the day it doesn't is usually the worst possible day.
What this usually looks like from the inside
If two or three of these sound familiar, this page is for you.
One person holds it all
Passwords, the router login, the backup drive, the supplier contacts, mostly in their head, and they are on leave next week.
Nobody knows what you have
Which laptops are still in use, what is installed on them, whether the machine in the corner is still needed.
The questionnaire arrived
A customer or insurer sent a security assessment and there is no honest way to fill it in.
Backups nobody has restored
Something is running. Whether it would actually bring the business back is an open question.
What we take on
Not just security. If we are going to be responsible for whether it is safe, we should be responsible for whether it works.
- Your internet connection, network and Wi-Fi, including a second link so an outage is not a closed day
- Setting up and looking after the computers your people use
- Accounts: created when someone joins, closed the day they leave
- Backups that are checked, and restores that have been tested
- A number to call when something is broken, with someone who already knows your setup
- A gateway between you and the internet that stops the known-bad automatically
- Protection on every machine, watched by us rather than by a pop-up nobody reads
- Updates and weaknesses tracked and fixed on a schedule you never have to think about
- A Security Operations Centre watching 24 hours a day, 365 days a year, so somebody notices at 3am, and does something about it
- The security questionnaire answered honestly, with evidence behind each answer
How it starts
Deliberately undramatic. Nothing changes for your people on day one.
We come and look
A walk round, a conversation with whoever has been holding it together, and a list of what actually exists.
We write it down
What you have, what is risky, what it would cost to fix, in order of what would hurt most, in plain language.
We fit the essentials
Gateway in, agents out, backups working and tested, accounts tidied. Usually a day or two on site.
We run it
You get a monthly report you can actually read, and someone to call. Your "computer person" gets their job back.
You keep the keys
Outsourcing IT should not mean being unable to leave. Your accounts are yours, the documentation is yours, the equipment is yours, and if you ever want to bring it back in-house or move to someone else, we hand over the lot. We would rather earn the next year than trap you in it.
And when the rules apply to you
Smaller organisations are often surprised to find themselves in scope for NIS2, through their sector, or because a customer's obligations flow down to them as contract terms. If that happens, you do not need to build a compliance programme from nothing: the registers, the training records and the incident procedure are part of the platform, and under Complete we maintain them with you.
If it does not apply to you, we will say so. Selling a small business a compliance programme it does not need is a good way to make one sale and no more.
Start with a look round
No obligation and no jargon. We will tell you what you have, what worries us, and what we would do first, and you can take that list to anyone you like.