Baseline Cyber Security, London
Practical cyber security, Cyber Essentials readiness, and modern workplace IT for small businesses. Delivered by someone who's spent nearly two decades keeping the lights on for much larger ones.
Why "baseline"
Most small businesses get "IT support": someone who turns up when something breaks. Few get a defined, documented baseline for their identity, devices and data: the thing insurers ask about after an incident, and the thing Cyber Essentials actually assesses. I set that baseline, get you certified against it, and keep it from drifting.
What's covered
Cyber Essentials readiness assessment
Gap analysis against the five technical controls, fixed before you submit.
Cyber Essentials Plus preparation
Hardening and evidence-gathering ahead of an external audit.
Security baseline & hardening review
Identity, endpoint and email configuration checked against a defined baseline, not a checklist.
Penetration test remediation
Findings translated into a prioritised, fundable fix list. Then the fixes get carried out.
Microsoft Intune deployment
Enrolment, compliance policy and app management for company and BYOD devices.
Conditional Access design
Access rules that hold up to an audit without locking your own team out.
Microsoft 365 administration
Teams, SharePoint, Exchange and OneDrive configured and kept that way.
Microsoft 365 Copilot governance
Rollout and data-access controls before Copilot sees anything it shouldn't.
Power Automate workflows
Starter/leaver processes, approvals and document handling, built to survive staff turnover.
IT process documentation
The runbooks that mean it doesn't all live in one person's head.
Fractional IT / security advisory
A senior second opinion on vendor choices and technology roadmap without a full-time hire.
Retained monthly support
A fixed number of hours held for you each month: planned work, not just firefighting.
What it costs
A structured scan of your Microsoft 365 and Entra ID setup against Microsoft and CISA security baselines. You get a plain-English report: what's misconfigured, what it risks, and what to fix first.
Documented handover, +£150
A branded, polished record of your current Microsoft 365 and Intune setup. Useful to keep on file, hand to a new hire, or show an insurer or auditor.
Gap analysis (half-day)
This doesn't include the IASME certification fee itself, which is paid directly to the certification body. Currently £300-£500 +VAT depending on your company size.
Full readiness & remediation
From £750
Scoped after the gap analysis once we know what actually needs fixing.
This doesn't include the IASME certification fee itself, which is paid directly to the certification body. Currently £300-£500 +VAT depending on your company size.
Retainer support: from £250/month for a fixed block of hours each month. Exact scope agreed after an initial conversation.
How it works
A structured review of where you actually stand today: identity, devices, email, backups, and Cyber Essentials scope. You get a written report, not a sales pitch.
Findings ranked by risk and effort, with a realistic timeline and cost. So you know what you're saying yes to before you say it.
The fixes get made. Where a specialist tool or third party is genuinely the better answer, I'll say so rather than build around it.
Ongoing retainer to keep configuration from drifting, keep certifications current, and be a phone call away when something breaks.
About
Baseline Cyber Security is run by Joe. Nearly 20 years in IT, most recently managing Microsoft 365, Intune and identity security for a large organisation. That experience is now applied directly to small businesses at a fraction of the cost of an in-house IT department.
Every engagement is delivered personally. No account handovers, no junior bench.
Get in touch
Tell me about your business and what's prompted the enquiry. It might be an insurer asking for Cyber Essentials, a client requiring it, or you just wanting IT that works properly. I'll reply within one working day.