Plain-English insights for people who run a business, not an IT department.

Cyber Essentials in 2026: what the current requirements mean for a 20-person business

Five controls, one questionnaire, and the parts that trip people up.

The Cyber Security and Resilience Bill: what UK SMEs and their IT suppliers should prepare for

Managed service providers come into scope, and so does incident reporting. Status checked at the time of writing.

Still running Windows 10? The 2026 plan for the last machines

Upgrade, replace or isolate, in that order.

Microsoft 365 Copilot for small businesses: where it saves hours and where it does not

The honest table, after a year of using it ourselves and rolling it out for clients.

Your Microsoft 365 data is not backed up by Microsoft, and what to do about it

The shared responsibility model, the 3-2-1 rule, and the restore test nobody runs.

Passkeys and multi-factor authentication: how to stop paying for password resets

Leased line or full-fibre broadband? Choosing with copper closing

What each one is, who needs which, and the questions to ask before signing.

Phishing in 2026: QR codes, MFA fatigue and the invoice that changed its bank details

The three attacks a small business is most likely to see this year, and the habit that stops each one.

We let an AI answer our own phone line. What we learned

Where it earned its keep, where a person still has to be, and the rules we set before switching it on.

How to choose an IT support company: nine questions, and the answers you want to hear

Written for the owner who is about to change provider and does not want to do it twice.