What is covered
Protecting your systems, and showing that you handle data responsibly.
- VPNs for safe remote access
- MFA to protect accounts
- Firewalls and intrusion detection to guard your network
- GDPR audits of how your systems handle personal data
- Vulnerability reviews to find weaknesses early
- Staff security awareness training so your team spots the risks
GDPR audits review how your systems and processes handle personal data. They are not legal advice.
Why it matters locally
My current focus is GDPR-compliant infrastructure and cloud security. I work with small teams that do not have an in-house security person, on-site in Cambridgeshire or remotely across the UK.
Security works best alongside good everyday support: see IT support and infrastructure.
Who it is for
Security and GDPR work is for organisations that hold other people’s data or depend on their systems, but have no security person on the payroll:
- Small businesses with customer records, accounts and email.
- Schools and community organisations that handle pupil, member or donor details.
- Professionals such as consultants and sole traders who hold client information.
The aim is proportionate protection: fix what matters first, explain it clearly and avoid scare tactics.
What a security review involves
A practical look at how you are protected today.
-
Look at the basics
Accounts, passwords and multi-factor authentication, devices and updates, backups, your network and firewall, and your website.
-
Find the weak points
A vulnerability review for the gaps attackers use most often, such as weak logins, out-of-date software and open services.
-
Prioritise the fixes
A short list, in plain English, of what to do first, what can wait and roughly how much effort each step needs.
-
Help you put it right
I can deploy VPNs, MFA, firewalls and intrusion detection, and train your staff so the protection sticks.
GDPR in practice
UK GDPR applies to almost every organisation that handles personal data. A GDPR audit looks at how your systems and processes treat that data, then turns the gaps into jobs you can finish: knowing what data you hold, a clear privacy notice, checking your suppliers, security for the data and a plan for a breach.
For a free starting point, read the plain-English GDPR checklist for small businesses and 8 cyber security steps. A GDPR audit is a technical and practical review, not legal advice.
Security and GDPR questions
Short, honest answers. Call or email if yours is not here.
Is a GDPR audit the same as legal advice?
No. A GDPR audit reviews how your systems and processes handle personal data and highlights practical gaps. It is not legal advice, and for legal questions you should speak to a qualified adviser.
Do small businesses really need multi-factor authentication (MFA)?
Yes. MFA asks for a second proof of identity when someone signs in, and it is one of the most effective single steps against stolen passwords. I deploy it for email, Microsoft 365, websites and admin accounts.
What happens in a vulnerability review?
I look at how your accounts, devices, network and website are set up, find weaknesses that attackers commonly use, and give you a prioritised list of what to fix first, in plain English.
Can you train my staff?
Yes. Staff security awareness training covers spotting phishing emails, safe passwords and what to do if something looks wrong. Most attacks start with a convincing email, so this is often the best value step.
What should I do if I think we have been attacked?
Call me as soon as you can. Disconnect the affected device from the network, do not pay or reply to anything, and note what you saw. If personal data may be involved you may need to report it to the ICO within 72 hours, so do not wait.