Cyber Security Services
for UK Businesses
Practical, ongoing protection for your people, devices and data. From penetration testing and vulnerability assessments to Microsoft 365 hardening and Microsoft Purview, we find your weak spots, fix them and keep watching.
- IASME Level 2
- Cyber Essentials guidance
- Since 1996
NCSC Assured Service Provider
We are an Assured Service Provider in association with the National Cyber Security Centre, the UK’s national authority on cyber security. Our Cyber Advisors are independently assessed by IASME for the NCSC, and help organisations put the Cyber Essentials controls in place.
- Cyber Advisor (Cyber Essentials)
- IASME Level 2
- Since 1996
What this means for you →See our listing on the NCSC website →
Why cyber security matters for smaller organisations
Attackers don’t only target large companies. Smaller organisations are often easier to get into, and the impact of a breach can be severe.
of UK businesses reported a cyber breach or attack in the last 12 months
of UK charities reported a cyber breach or attack in the last 12 months
of UK businesses experienced phishing, by far the most common type of attack
Businesses hit, by size
of businesses were victims of cyber crime (about 267,000)
of businesses hold Cyber Essentials
Source: UK Government Cyber Security Breaches Survey 2025/26. Read our free Small Business Guide to Cyber Security (2026 edition).
Find out what an attacker would find first
Internal and external scans find missing patches, misconfigurations and exposed services. Your free security review starts here, with your risks ranked so you know what matters most.
Findings, ranked
- HighAdmin account without multi-factor authentication
- HighService exposed to the internet
- MediumMissing patches on a server
- MediumLegacy sign-in still allowed in Microsoft 365
- MediumDomain open to spoofing, no DMARC set up
- LowMisconfigured guest Wi-Fi
An example scan, not a real client.
How we protect your business, layer by layer
No single tool stops every attack. We build protection in layers, so if one control is bypassed, the next one catches it.
- The attack
A phishing email is sent to your team.
Layer 1Email
Filtering for phishing, spoofing and malicious attachments.
- If it gets past
One reaches someone’s inbox.
Layer 2People
Guidance to help your team spot phishing and keep good security habits.
- If it gets past
A password is entered on a fake page.
Layer 3Identity
Multi-factor authentication and controlled admin access.
- If it gets past
Malicious software reaches a device.
Layer 4Devices
Endpoint protection, patching and secure configuration.
- If it gets past
It tries to spread across your systems.
Layer 5Network
Managed firewalls and continuous vulnerability monitoring.
- If it gets past
The worst happens.
Layer 6Backup and recovery
Verified backups so you can recover quickly if the worst happens.
An illustration of how the layers work together, using phishing, the most common type of attack.
What Our Clients Say
“Working within the healthcare sector, security, compliance and reliability are absolutely critical. ABCOM understood those requirements from day one. As cybersecurity and regulatory compliance became increasingly important, ABCOM helped us navigate those challenges with confidence.”
Our cyber security services
Everything you need to understand your risk, close the gaps and stay protected, delivered in plain English by one accountable team.
ForSMEsCharitiesSchoolsProfessional practices
Find
your weak spots
Penetration testing
Qualified testers carry out controlled, ethical attacks on your network, website, cloud or Microsoft 365 to find weaknesses before criminals do. You get a prioritised report and help fixing what is found.
Ask about a pen test →Vulnerability assessment
Internal and external scans find missing patches, misconfigurations and exposed services. With our Core Secure plan, scanning is continuous with monthly reporting.
Explore vulnerability assessment →Fix
the gaps
Microsoft 365 security hardening
We lock down your tenant: multi-factor authentication and Conditional Access, legacy sign-in blocked, admin roles tightened, Defender for Office 365 tuned and your Microsoft Secure Score improved.
Free email hijack guide →Microsoft Purview managed service
Protect and govern sensitive data with sensitivity labels, data loss prevention, retention policies and Compliance Manager, set up and managed for you.
What is Compliance Score? →Cyber Essentials and Cyber Essentials Plus
Readiness guidance through to certification, with clear, fixed pricing and help fixing any gaps.
Cyber Essentials pricing →IASME Cyber Assurance
Go beyond Cyber Essentials with governance, risk assessment, incident planning and UK GDPR controls. ABCOM holds IASME Level 2 and can guide you through it.
IASME quality principles →Keep watching
so it stays that way
Managed endpoint protection
Next-generation antivirus and endpoint detection and response on every device, monitored by our team. Powered by Huntress and included on all managed plans.
What is endpoint protection? →AI usage protection
See which AI tools your staff use and stop sensitive data leaking into ChatGPT and Copilot. Acronis GenAI Protection, managed by ABCOM.
About GenAI protection →Email security and phishing protection
Filtering for phishing, spoofing and impersonation, with SPF, DKIM and DMARC set up correctly so your domain can’t easily be faked.
Email domain protection →Respond
if the worst happens
Incident response and recovery
If the worst happens, we contain the threat, restore from verified backups and help you meet your reporting duties.
Get help now →A clear, proportionate approach
No scare tactics, no unnecessary tools.
- Step 1
Assess
A free security review, Microsoft Secure Score check and vulnerability scan.
- Step 2
Prioritise
A plain-English report with your risks ranked, so you know what matters most.
- Step 3
Protect
We fix the gaps, harden Microsoft 365 and guide you to certification.
- Step 4
Monitor and report
Continuous monitoring, monthly reporting and regular reviews with your account manager.
The line is an illustration, not a measurement. Step 1 is free.
What does cyber security cost?
Cyber security is built into our Core Secure plan, which adds this on top of full IT support:
- Continuous vulnerability monitoring
- A security baseline
- Cyber Essentials-aligned controls
- Monthly security reporting
The IASME fee, with readiness help quoted separately.
Cyber Essentials pricing →What should we do if we have a cyber attack?
Phone us straight away. Don’t switch devices off or pay any ransom.
01444 871 200- ContainWe contain the threat, for example by locking accounts and isolating devices.
- InvestigateWe work out what has happened.
- RestoreWe restore from verified backups.
- ReportReport the incident to Report Fraud (formerly Action Fraud).
If personal data is affected, you may need to report it to the ICO within 72 hours.
Clear, accountable cybersecurity support
Whether you need support reviewing your current security controls or guidance on strengthening your cybersecurity posture, we’re here to help you take a clear, structured approach.
Book my free security reviewPrefer to talk? 01444 871 200
Got Cybersecurity Questions?
What does ABCOM offer in cybersecurity?
We offer managed cybersecurity services for SMEs including threat monitoring, risk assessments, email security, backup solutions, and Cyber Essentials support.
Is ABCOM a trusted cybersecurity partner for small businesses?
Yes. We’ve been supporting small businesses since 1996 with practical, friendly IT and security services tailored to each sector.
Can ABCOM help my business get Cyber Essentials certified?
Absolutely. We’ll guide you through it, handle the heavy lifting, and ensure you meet the standard with confidence.
Do I need cybersecurity if I only have a small team?
Yes. Small businesses are prime targets because criminals know many don’t have proper protection. One weak link can cost thousands.
How much does cyber security cost for a small business?
Cyber security is built into our Core Secure managed IT plan at £89 per user per month (excluding VAT), which adds continuous vulnerability monitoring, a security baseline, Cyber Essentials-aligned controls and monthly security reporting on top of full IT support. Cyber Essentials certification starts from the £320 + VAT IASME fee, with readiness help quoted separately. See Managed IT plans and Cyber Essentials pricing.
What is the difference between Cyber Essentials and IASME Cyber Assurance?
Cyber Essentials covers five technical controls, such as firewalls, updates and access control. IASME Cyber Assurance is broader: it also covers governance, risk assessment, incident response, training and data protection (UK GDPR). Level 1 is a verified self-assessment and Level 2 includes an independent audit. ABCOM holds IASME Level 2 and can guide you through either standard.
What should we do if we have a cyber attack?
Phone us straight away on 01444 871 200. Don’t switch devices off or pay any ransom. We will contain the threat, for example by locking accounts and isolating devices, then investigate and restore from backup. Report the incident to Report Fraud (formerly Action Fraud), and if personal data is affected you may need to report it to the ICO within 72 hours.
Do you provide cyber security for businesses and charities in Sussex?
Yes. ABCOM is based in Burgess Hill and protects businesses and charities across Sussex and the UK, with remote monitoring and onsite support where needed.
What is the difference between a penetration test and a vulnerability assessment?
A vulnerability assessment uses automated scanning to find known weaknesses, such as missing patches or misconfigured services, across your systems. A penetration test goes further: a qualified tester actively tries to exploit weaknesses, as a real attacker would, to show what could actually be accessed. Most organisations benefit from regular vulnerability scanning plus a periodic penetration test.
What does Microsoft 365 security hardening involve?
We review and tighten your Microsoft 365 tenant: enforcing multi-factor authentication and Conditional Access, blocking legacy sign-in, tightening admin roles, configuring Defender for Office 365 against phishing and malware, and improving your Microsoft Secure Score. It is one of the most effective ways to prevent email account takeover.
What is Microsoft Purview and do we need it?
Microsoft Purview is Microsoft’s set of data governance and compliance tools, including sensitivity labels, data loss prevention, retention policies and Compliance Manager. It helps you find, classify and protect sensitive information, which supports UK GDPR. If you hold personal or confidential data, our managed Purview service sets it up and keeps it working for you.
Is your support available 24/7?
Our service desk has a 2-hour response for critical issues during business hours (8am to 6pm, Monday to Friday). Our endpoint detection and response (EDR) software runs 24/7 on every protected device, and it is monitored around the clock by a security operations centre (SOC).
What do EDR, SOC, NOC and ITDR mean?
EDR (endpoint detection and response) is security software on each laptop, desktop and server that watches for signs of an attack and can isolate an infected device. A SOC (security operations centre) is the team of analysts who investigate those alerts around the clock. A NOC (network operations centre) monitors the health and availability of networks, servers and devices, so it keeps systems running rather than hunting attackers. ITDR (identity threat detection and response) is the identity side of the same idea: it looks for signs that a Microsoft 365 account has been taken over, such as logins from unusual places or suspicious mailbox rules. Microsoft includes identity protection features in its premium plans.
Have more questions? Visit our Knowledge Base.
Microsoft 365, Microsoft Purview, Microsoft Defender and Copilot are trademarks of the Microsoft group of companies.