Cyber Security Best Practices: How to Protect Your Business

The threats targeting businesses keep evolving, but the way most businesses get breached does not. Data breaches, ransomware, phishing attacks and plain human error do most of the damage. Keeping your business secure requires constant vigilance and a well-executed cybersecurity strategy.

This guide covers the best practices your business should have in place to protect itself. Most of them are fundamentals done consistently, not expensive tools.

Table of contents

Strengthen Password Policies

Weak passwords are one of the most common entry points for cybercriminals. Despite the growing awareness of cybersecurity, too many businesses still rely on simple passwords that are easy for attackers to crack.

Best practices:

  • Enforce Strong Passwords: Require all employees to use complex passwords that include a mix of uppercase and lowercase letters, numbers, and special characters.
  • Password Length: Encourage passwords that are at least 12 characters long.
  • Multi-Factor Authentication (MFA): Implement MFA for all sensitive systems and accounts. This adds an extra layer of security, requiring users to verify their identity using a second factor like a code sent to their phone.
  • Password Managers: Encourage the use of password managers to help employees generate and store complex passwords securely.

Embrace Zero Trust Architecture

As cyber threats become more sophisticated, businesses need to shift away from the traditional “trust but verify” security model to a more secure Zero Trust approach. Zero Trust assumes that every attempt to access a system, whether internal or external, could be a threat.

Best practices:

Monitor and Log All Activity: Regularly monitor user activity and behaviour to detect any unusual patterns that may indicate a breach.

Verify Every Access Request: Authenticate and authorise every access request, whether it comes from inside or outside the network, regardless of whether the user or device has been previously verified.

Segmentation: Divide your network into multiple segments with different access control levels, ensuring that unauthorised access to one part of your network doesn’t grant access to the entire system.

Keep Software and Systems Updated

Unpatched software is a critical vulnerability for businesses. Outdated systems and applications are often riddled with security flaws that hackers can exploit. In fact, many major cyberattacks are the result of businesses failing to update their systems with the latest security patches.

Best practices:

  • Automate Updates: Set up automatic updates wherever possible to ensure that all software and operating systems are always up to date.
  • Patch Management: Implement a patch management process to ensure that all software vulnerabilities are addressed as soon as updates are released.
  • Retire Unsupported Software: If software is no longer supported by the vendor, replace it immediately with a more secure, up-to-date option.

Train Employees Regularly

Employees are often the weakest link in a company’s cybersecurity defenses. Whether through phishing attacks, social engineering, or accidental data leaks, employee mistakes can leave your business vulnerable. Employee cyber security training is a non-negotiable component of your security strategy.

Best practices:

Report Suspicious Activity: Encourage employees to report any suspicious emails, links, or attachments immediately.

Frequent Training Sessions: Conduct regular training sessions to keep employees up to date on the latest cybersecurity threats and best practices.

Phishing Simulations: Run simulated phishing campaigns to test your employees’ awareness and responsiveness.

Cybersecurity Policies: Clearly communicate your company’s cybersecurity policies to all employees and ensure that everyone understands their role in protecting company data.

Implement Endpoint Protection

In today’s increasingly remote work environment, endpoint security is more critical than ever. Each device connected to your network represents a potential entry point for attackers. Whether employees are using company-issued laptops or their personal devices, ensuring endpoint security is a must.

Best practices:

Regular Audits: Conduct regular audits to identify any unauthorised or insecure devices connected to your network.

Device Encryption: Ensure that all devices, especially laptops, smartphones, and tablets, are encrypted to protect data in case of loss or theft.

Endpoint Detection and Response (EDR): Implement EDR solutions that actively monitor, detect, and respond to security incidents across all connected devices.

Secure Cloud Environments

As more businesses move their operations to the cloud, the importance of securing cloud environments cannot be overstated. Nearly every business now relies on some form of cloud computing, which makes it a prime target for cybercriminals.

Best practices:

Backups and Recovery Plans: Regularly back up your data to a secure, off-site location and have a disaster recovery plan in place in case of a cloud breach.

Strong Access Controls: Implement strict access controls to limit who can access sensitive data and applications in the cloud.

Cloud Security Monitoring: Use cloud security monitoring tools to detect and respond to any anomalies or suspicious activity in real time.

Encryption in Transit and at Rest: Ensure that all data stored in the cloud is encrypted both during transmission and when stored.

Leverage Artificial Intelligence for Threat Detection

Modern attacks are increasingly sophisticated and difficult to detect with traditional security measures. This is where Artificial Intelligence (AI) comes into play. AI can analyse vast amounts of data in real-time, identify anomalies, and detect potential threats before they escalate into major incidents.

Best practices:

Automated Incident Response: Implement AI-driven automated incident response systems to quickly contain and mitigate threats.

AI-Driven Security Tools: Invest in AI-powered security tools that provide real-time threat detection, incident response, and network monitoring.

Behavioural Analytics: Use AI to monitor user behaviour and detect any unusual activities that may indicate a security breach.

Ransomware Prevention and Recovery

Ransomware remains one of the most dangerous and costly threats facing businesses. Preventing and preparing for ransomware attacks should be a top priority for every business.

Best practices:

Anti-Ransomware Tools: Use anti-ransomware software to detect and block malicious encryption attempts.

Regular Data Backups: Back up all critical data regularly and store backups in a secure, off-network location to prevent them from being compromised during a ransomware attack.

Network Segmentation: Limit the damage caused by a ransomware attack by segmenting your network and restricting access between different parts of your network.

Employee Training: Ensure that employees can recognise phishing attempts, one of the most common delivery methods for ransomware.

Develop a Cybersecurity Incident Response Plan

Even with the best defences in place, cyberattacks can still happen. Having a well-documented incident response plan is essential for minimising the impact of a breach and recovering quickly.

Best practices:

Post-Incident Review: After a breach has been contained, conduct a thorough review to determine how it occurred and what steps can be taken to prevent future incidents.

Designate an Incident Response Team: Identify key members of your team who will be responsible for responding to a cybersecurity incident, including IT, legal, and PR professionals.

Establish a Communication Plan: Develop a clear communication plan that outlines how to inform employees, customers, and stakeholders in the event of a breach.

Test Your Plan: Regularly test your incident response plan through simulated attacks to ensure that your team can respond quickly and effectively.

Ensure Regulatory Compliance

With evolving privacy laws and data protection regulations, businesses must ensure that they comply with all relevant cybersecurity and data protection requirements. Regulation keeps tightening, which makes compliance a continuing obligation rather than a one-off exercise.

Best practices:

Data Privacy Officers: Appoint a Data Privacy Officer (DPO) if required by law to oversee compliance efforts and ensure the protection of sensitive customer data.

Stay Informed: Keep up to date with the latest regulations affecting your industry, such as GDPR, CCPA, and other privacy laws. For UK data protection, our free GDPR health check shows where you stand in about three minutes.

Compliance Audits: Conduct regular compliance audits to ensure that your cybersecurity practices align with regulatory requirements.

Protect Your Business Now and in the Years Ahead

As cyber threats continue to evolve, the best way to protect your business is by staying proactive and adopting the latest cybersecurity best practices. From strengthening passwords to embracing Zero Trust Architecture, each step you take will help reduce the risk of cyberattacks and ensure the safety of your business data.

At ATS Connection, we deliver managed cyber security for businesses across West Sussex, and certification when you need to prove it: our guide to Cyber Essentials costs covers real prices. Start with the free IT security review, or get in touch and we will tell you where you stand.

The Importance of Mobile Device Management in Today’s Business Environment

In the modern business landscape, mobile devices have become essential tools that empower employees to stay connected, productive, and flexible, regardless of their physical location. From smartphones and tablets to laptops and wearables, mobile devices allow businesses to operate in real-time, enabling quick decision-making and seamless collaboration. However, with the increasing reliance on mobile devices comes a significant challenge, how to manage and secure these devices to protect sensitive corporate data.

This is where Mobile Device Management (MDM) comes into play. MDM is a crucial aspect of IT infrastructure that allows businesses to manage, monitor, and secure their mobile devices from a centralised platform. In this blog, we will explore the importance of MDM, its key features, and how it benefits businesses. We’ll also discuss how ATS Connection can help you implement and manage an MDM solution tailored to your organisation’s needs.

What is Mobile Device Management (MDM)?

Mobile Device Management (MDM) is a comprehensive solution designed to manage, secure, and monitor mobile devices used within a business. MDM solutions typically include features such as device configuration, security enforcement, application management, and data protection. By deploying MDM, businesses can ensure that all devices accessing corporate data adhere to security policies, reducing the risk of data breaches and unauthorized access.

MDM solutions are essential for businesses that have embraced a Bring Your Own Device (BYOD) policy, as well as those that provide company-owned devices to employees. With MDM, IT administrators can remotely manage and secure devices, ensuring that sensitive data remains protected even if a device is lost or stolen.

Why is MDM Important for Businesses?

The importance of MDM cannot be overstated, especially in a world where mobile devices are increasingly used to access sensitive information and perform critical business tasks. Here are some key reasons why MDM is vital for businesses:

1. Data Security

Data security is one of the primary reasons why businesses adopt MDM solutions. Mobile devices, by their very nature, are prone to being lost, stolen, or compromised. Without proper security measures in place, a lost or stolen device could provide unauthorised access to sensitive corporate data, leading to potential data breaches and financial losses.

MDM solutions provide robust security features, such as remote wipe, encryption, and multi-factor authentication, to protect corporate data stored on mobile devices. In the event of a lost or stolen device, IT administrators can remotely wipe the device to ensure that no sensitive information falls into the wrong hands.

2. Compliance with Regulatory Requirements

Many industries are subject to strict regulatory requirements regarding data protection and privacy. Failure to comply with these regulations can result in hefty fines, legal consequences, and reputational damage. MDM solutions help businesses maintain compliance by enforcing security policies across all mobile devices.

For example, healthcare organisations must comply with the Health Insurance Portability and Accountability Act (HIPAA), which requires the protection of patient data. An MDM solution can ensure that all devices accessing patient information are secure and compliant with HIPAA regulations.

3. Streamlined Device Management

Managing a fleet of mobile devices can be a daunting task, especially for large organizations with hundreds or thousands of devices in use. MDM solutions simplify the management of these devices by providing a centralised platform for IT administrators to configure, monitor, and secure devices.

With MDM, IT administrators can automate device setup, enforce security policies, and deploy applications remotely. This not only saves time and resources but also ensures consistency across all devices, reducing the risk of human error.

4. Enhanced Productivity

MDM solutions enable employees to work more efficiently by providing them with secure access to corporate resources, no matter where they are. Employees can use their mobile devices to access email, collaborate on projects, and complete tasks without compromising security.

Additionally, MDM solutions can restrict access to non-work-related applications and websites, ensuring that employees remain focused and productive during work hours.

5. Support for BYOD Policies

The Bring Your Own Device (BYOD) trend has gained popularity in recent years, allowing employees to use their personal devices for work purposes. While BYOD policies offer flexibility and cost savings, they also present security challenges.

MDM solutions address these challenges by providing a secure environment for employees to access corporate data on their personal devices. IT administrators can enforce security policies, such as encryption and authentication, to protect corporate data while allowing employees to use their preferred devices.

6. Remote Work Enablement

The COVID-19 pandemic has accelerated the adoption of remote work, with many organizations shifting to a fully remote or hybrid work model. MDM solutions are essential for enabling remote work, as they allow employees to securely access corporate resources from any location.

With MDM, businesses can ensure that remote employees have the tools they need to work efficiently, while also protecting corporate data from potential security threats. MDM solutions also provide remote support capabilities, allowing IT administrators to troubleshoot issues and provide assistance to employees no matter where they are.

Key Features of Mobile Device Management Solutions

MDM solutions offer a wide range of features designed to enhance security, streamline device management, and improve productivity. Here are some of the key features of MDM solutions:

1. Device Enrollment and Configuration

MDM solutions simplify the process of enrolling and configuring new devices. IT administrators can automate the setup process, ensuring that devices are configured with the correct settings, security policies, and applications.

2. Security Enforcement

MDM solutions provide robust security features, such as encryption, remote wipe, and multi-factor authentication, to protect corporate data on mobile devices. IT administrators can enforce security policies across all devices, ensuring compliance with regulatory requirements.

3. Application Management

MDM solutions allow IT administrators to deploy, update, and manage applications on mobile devices. This ensures that employees have access to the necessary tools and software to perform their jobs, while also reducing the risk of unauthorized applications being installed.

4. Remote Monitoring and Support

MDM solutions provide remote monitoring and support capabilities, allowing IT administrators to monitor device activity, troubleshoot issues, and provide assistance to employees from a centralised platform.

5. Data Loss Prevention (DLP)

MDM solutions include Data Loss Prevention (DLP) features that protect sensitive data from being shared or accessed by unauthorised users. DLP features can restrict access to certain files and applications, ensuring that corporate data remains secure.

How ATS Connection Can Help You Implement and Manage MDM

Implementing and managing an MDM solution can be a complex task, especially for organisations with limited IT resources. At ATS Connection, we specialize in helping businesses of all sizes implement and manage MDM solutions tailored to their specific needs.

Our team of experts will work with you to assess your organisation’s requirements, design a customised MDM solution, and ensure a seamless deployment. We provide ongoing support and monitoring to ensure that your MDM solution remains effective and up-to-date.

Whether you’re looking to secure a fleet of company-owned devices or implement a BYOD policy, ATS Connection has the expertise to help you achieve your goals. Let us take care of your mobile device management needs so that you can focus on growing your business.

Contact us today to learn more about how we can help you implement and manage an MDM solution that keeps your devices secure and your business running smoothly.

Microsoft Intune: The Ultimate Solution for Secure and Efficient Device Management

In today’s fast-paced, digitally-driven world, businesses rely heavily on mobile devices to stay connected and productive. However, with this increased reliance comes the pressing need for robust security measures to protect sensitive data and ensure seamless device functionality. This is where Microsoft Intune shines, a powerful mobile device management (MDM) solution designed to safeguard your organisation’s devices and data while enhancing operational efficiency.

Whether you’re managing company-owned devices or a bring-your-own-device (BYOD) environment, Microsoft Intune provides the tools and capabilities to keep your IT environment secure and compliant. In this blog, we’ll explore why Intune is the go-to solution for businesses looking to secure their digital assets and how ATS Connection can help you implement and manage this essential tool.

What is Microsoft Intune?

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). It allows organisations to control how their devices, such as smartphones, tablets, and laptops are used, ensuring they adhere to the company’s security policies and configurations. Intune integrates seamlessly with other Microsoft services, including Azure Active Directory (Azure AD), Office 365, and Microsoft Endpoint Manager, providing a comprehensive security solution for your entire IT ecosystem.

Why Choose Microsoft Intune?

With an increasing amount of sensitive information being accessed and stored on mobile devices, the risk of data breaches and unauthorized access has never been higher. Microsoft Intune helps mitigate these risks by providing a range of features designed to secure your devices and the data they access.

Here are some key reasons why Microsoft Intune is the best choice for your organisation:

1. Comprehensive Device Management

Intune allows you to manage a wide range of devices, including Windows PCs, Android phones, iOS devices, and macOS computers. Whether your employees are using company-issued devices or their personal ones, Intune ensures that every device accessing your businesses data complies with your security policies. You can enforce device encryption, configure WiFi and VPN settings, deploy apps, and even restrict access to specific resources based on the device’s compliance status.

2. Enhanced Security and Compliance

One of the most significant advantages of Intune is its ability to enforce strict security measures across all managed devices. Intune enables you to:

  • Restrict Access: Ensure that only enrolled and compliant devices can access your organization’s data. You can block access to resources like Exchange emails, SharePoint Online, and OneDrive for Business if the device doesn’t meet your security criteria.
  • Remote Wipe: If a device is lost or stolen, you can remotely wipe organizational data from it without affecting the user’s personal information. This feature is crucial for maintaining data security in BYOD environments.
  • Multi-Factor Authentication (MFA): Intune integrates with Azure AD to enforce MFA, adding an extra layer of security to your organisation’s login process.
  • Location-Based Restrictions: Limit access to sensitive data based on the user’s location or sign-on method, ensuring that only authorized users can access your resources.

3. Seamless Integration with Microsoft Ecosystem

Intune is part of Microsoft Endpoint Manager, which also includes Configuration Manager and other management tools. This integration allows you to manage both on-premises and cloud-based devices from a single console, streamlining your IT operations. Additionally, Intune works seamlessly with Office 365, enabling you to control access to your organization’s data across all Microsoft applications.

4. User-Friendly Self-Service Portal

Intune’s self-service portal empowers users to enroll their own devices, install corporate applications, and access company resources with minimal IT intervention. This not only saves time for your IT department but also provides a better user experience for employees.

5. Data Protection for BYOD

In today’s modern workplace, employees often use their personal devices to access company data. Intune offers a balanced approach to managing BYOD environments by encrypting only organisational data, leaving personal information untouched. This ensures that your company’s sensitive data remains secure while respecting the privacy of your employees.

How ATS Connection Can Help with Microsoft Intune Deployment

At ATS Connection, we specialize in helping businesses implement and manage Microsoft Intune to ensure maximum security and efficiency. Our services include:

1. Gap Analysis

We’ll conduct a comprehensive security review of your current IT environment to identify potential vulnerabilities and determine the scope of your Intune deployment. This analysis helps us tailor the solution to meet your specific needs.

2. Strategic Planning

Our team will work with your stakeholders to devise a strategic plan for deploying Intune across your organisation. We’ll ensure that the deployment aligns with your business goals and enhances your overall security posture.

3. Policy Configuration

Based on the strategic plan, we’ll configure Intune policies to enforce compliance, monitor high-risk activities, and apply security measures like Multi-Factor Authentication (MFA). Our goal is to create a security framework that protects your data without hindering productivity.

4. Intune Deployment

We’ll handle the complete deployment of Intune, including configuring compliance policies, managing Microsoft accounts, and setting up antivirus and firewall protections. Our team ensures that all devices, especially those with administrative privileges, are secure and compliant with your organisation’s policies.

5. Ongoing Support and Management

Once Intune is deployed, our job isn’t done. We provide ongoing support to ensure that your Intune environment remains secure and up-to-date. From regular policy reviews to security audits, we’re here to help you maintain a robust IT security framework.

Secure Your Digital Environment with Microsoft Intune

With the ever-growing threat landscape, securing your businesses devices and data is more important than ever. Microsoft Intune offers a comprehensive solution to manage and protect your devices, ensuring that your sensitive information is safe from unauthorised access.

If you’re ready to take the next step in securing your IT environment, ATS Connection is here to help. Contact us today to learn more about our Microsoft Intune deployment services and how we can tailor a solution to meet your specific needs.

How to Set Up Your New PC for Optimal Performance

Setting up one machine, or twenty? For a single PC or laptop at home we can do the whole thing for you: see home IT support or PC and laptop repairs in Arundel. If you are setting machines up for staff, device setup and onboarding is included in our business IT support packages.

So, you’ve finally upgraded your computer, trading in the old faithful for a sleek new Windows PC. Whether it’s a powerful desktop or a lightweight laptop, setting up your new computer correctly is essential to ensure it runs smoothly, securely, and according to your specific needs.

Setting up a new PC might seem straightforward, but there are several critical steps that, if overlooked, could lead to frustration, data loss, or suboptimal performance. At ATS Connection, we specialise in making IT simple and effective, so whether you’re setting up your new PC yourself or looking for expert help, we’ve got you covered. Let’s walk through the key steps and considerations for setting up a new computer.

Why Setting Up Your New PC Correctly is Crucial

For those who are tech-savvy, setting up a new PC might feel like second nature. However, if you’re not familiar with the intricacies of Windows, security settings, or data transfer processes, you could encounter some significant challenges. Here are a few reasons why it’s essential to get it right:

Security Risks

Failing to properly set up your PC could leave it vulnerable to security threats. Without the right configurations, your computer might be exposed to viruses, malware, and cyber-attacks. Proper setup includes installing antivirus software, enabling firewalls, and ensuring your operating system is up to date.

Data Loss

When transitioning to a new computer, there’s a risk of losing important data if you don’t correctly transfer files and set up backup processes. Ensuring that your data is securely backed up and transferred is a crucial part of the setup process.

Reduced Performance

Out of the box, new PCs often come loaded with unnecessary software known as bloatware. This can slow down your system and take up valuable storage space. Properly removing these programs can significantly improve your computer’s performance.

Step-by-Step Guide to Setting Up Your New PC

Let’s dive into the steps you should follow to ensure your new computer is set up for success:

Physical Setup

Connect Your PC: Start by connecting your PC to a power source and booting it up. For desktops, connect peripherals such as your keyboard, mouse, and monitor using USB or Bluetooth. Internet Connection: For a wired connection, use an Ethernet cable to connect to the internet. For wireless, connect via Wi-Fi.

Create a Login

When setting up a new PC, you’ll be prompted to create a login. You have the option to use a local account (limited to one device) or a Microsoft account (which syncs across multiple devices and services like Office 365 and OneDrive).

Perform a Windows Update

Before diving into other setups, ensure your Windows operating system is fully updated. These updates are vital as they include the latest security patches and performance improvements. Do not skip this step, even if it seems time-consuming.

Configure Security Settings

Windows comes with built-in security features like Windows Defender and firewall protection. While these are a good start, you might want to consider additional antivirus software for enhanced protection. At ATS Connection, we partner with industry leaders like ESET to provide comprehensive cybersecurity solutions.

Remove Bloatware

Bloatware refers to pre-installed software that you likely don’t need. These programs can slow down your PC by using up resources. Manually uninstall these unnecessary programs or use specialised software to clean your system.

Transfer Your Data

Once your new PC is secure and running efficiently, it’s time to transfer your data. This can be done using external hard drives, cloud storage, or direct transfers. We highly recommend consulting with IT professionals to ensure your data is transferred safely and without corruption.

Personalise Your PC

Now that the essentials are in place, you can personalise your PC. Adjust settings, install your preferred applications, set your desktop background, and choose your default web browser. Personalisation helps make your computer truly yours.

Top Tips for Setting Up Your New PC

Setting up a new computer can be straightforward if you take your time and follow the steps carefully. Here are some top tips to ensure the process runs smoothly:

• Follow Instructions Methodically: Don’t rush through the setup. Each step is important and skipping any could cause issues down the line.
• Document Important Information: Make a physical note of all passwords, encryption keys, and any other important information during the setup.
• Explore New Features: Take the time to familiarise yourself with your new computer’s features and settings.

How ATS Connection Can Help

At ATS Connection, we understand that setting up a new computer can be daunting, especially if you want to ensure everything is configured correctly from the start. Our expert team is here to help with:

• New PC Supply & Setup: We can provide and set up your new computer to ensure it’s tailored to your needs.
• Data Backup & Transfer: Protect your valuable data with our backup solutions and safe transfer processes.
• Advanced Cybersecurity: With partnerships with top security providers like ESET, we offer comprehensive protection against modern threats.

Get in Touch for Expert IT Support

Whether you’re setting up a new PC for personal use or need professional IT services for your business, ATS Connection is here to help. We’ve been supporting businesses and individuals with top-tier IT services for years, ensuring that technology works for you, not against you.

For more information on how we can assist with your IT needs, or to schedule a consultation, call us at 01903 255159 or email us at contact@atsconnection.co.uk. Let’s get your new PC set up the right way!

Southern Water Cyber Attack

In the digital era where data is king, the unsettling news of the Southern Water Cyber Attack has brought to light the alarming vulnerability of our personal information. Serving a staggering 4.7 million customers, Southern Water became the target of cybercriminals who maliciously accessed the personal data of up to 470,000 individuals. This incident underscores the ever-present threat of cybercrime and the dire need for robust cybersecurity management.

Our experts seeks to uncover the layered impact of this cyber attack, delving into how it has affected customers and the response measures taken by Southern Water. We’ll also discuss protective steps for those affected and highlight why formidable cybersecurity is not just a necessity but a mandate in safeguarding personal data against such unforeseen data hacks. Trust in our services at ATS Connection to fortify your digital defences, ensuring that security breaches aren’t just a risk mitigated, but a disaster averted.

Understanding the Cyberattack

On January 23, Southern Water experienced a significant cyber attack, marking a concerning escalation in the frequency and severity of cybercrime incidents targeting essential services. The attack compromised the personal data of potentially 470,000 customers, spotlighting the critical necessity for robust cybersecurity management in all businesses, particularly those handling sensitive customer information.

Key Points of the Cyber Attack:

  • Date of Occurrence: The cyber attack took place on January 23rd, highlighting the need for constant vigilance as cyber threats can arise at any time.
  • Data Breach Scale: Up to 470,000 customers’ personal data was accessed, underlining the potential for substantial harm from such cyber attacks.
  • Urgency for Cybersecurity: This incident reinforces the importance of implementing strong cybersecurity measures to protect customer data.

The Southern Water Cyber Attack serves as a stark reminder of the vulnerabilities that exist within our digital infrastructures. It underscores the imperative for companies to invest in comprehensive cybersecurity solutions, like those offered by ATS Connection, to prevent data breaches and protect against cyber threats. Our services at ATS Connection are designed to provide the highest level of security, ensuring that your business is shielded from the devastating impacts of cybercrime.

Impact on Southern Water Customers

The repercussions of the Southern Water Cyber Attack have rippled through its customer base, with up to 10% of its 4.6 million customers potentially compromised. The breach, which was flagged following suspicious activity on the company’s IT systems, has led to the exposure of sensitive personal information, including:

  • Personal Identifiers: Full names and dates of birth.
  • Financial Information: Bank account details, which could be exploited for financial fraud.
  • National Insurance Numbers: Which could be used for identity theft.

In response to this significant data hack, Southern Water has taken decisive action:

  1. Immediate Steps: Enhanced monitoring and protection tools were promptly implemented by IT security teams to detect any further suspicious activity.
  2. Expert Collaboration: Work with independent cyber-security experts began to monitor the dark web, ensuring that no evidence of the stolen data being published online was found.
  3. Support for Customers: Notifications to the affected individuals are being sent, coupled with security advice and complimentary Experian credit monitoring services for 12 months.

As the investigation unfolds, with Southern Water collaborating with the National Cyber Security Centre and the Information Commissioner’s Office, it is a stark reminder for businesses of the importance of cyber security management. At ATS Connection, we understand the gravity of such cybercrime incidents and offer robust security services to prevent such breaches, ensuring peace of mind for our clients. Customers and former/current employees are urged to remain vigilant against targeted phishing attempts and to utilise the credit monitoring services provided. It is reassuring to note that, despite the cyber attack, water services and supplies have remained unaffected.

For more detailed information on the response to the cyber attack, visit Southern Water’s update and for insights into the importance of cybersecurity management, explore ATS Connection’s services.

Southern Water’s Response

In the wake of the Southern Water Cyber Attack, the company’s response has been multifaceted, prioritising customer communication and data protection. Affected customers have been directly contacted, with the company taking the following steps:

  • Notification and Support: Southern Water has been proactive in notifying affected customers and has reported the incident to the Information Commissioner’s Office (ICO). To support potentially impacted individuals, they are offering complimentary Experian credit monitoring services for 12 months.
  • Enhanced Security Measures: IT security teams have bolstered defences by implementing enhanced monitoring and protection tools to prevent further incidents. Additionally, they have engaged with independent cybersecurity experts to monitor the dark web for any signs of the stolen data being circulated.
  • Collaborative Efforts: The company is working closely with UK Government, regulators, the National Cyber Security Centre, police, and the ICO to address and manage the aftermath of the cyber attack.

Protective Measures for Affected Customers

In response to the Southern Water Cyber Attack, the company has initiated several protective measures for the customers and employees whose personal data may have been compromised. These seps are critical in mitigating the potential misuse of sensitive information and underpin the importance of robust cybersecurity management.

Protective Measures for Affected Individuals:

  • Direct Contact and Advice: Southern Water is proactively reaching out to the affected individuals, providing them with guidance on potential risks. This includes alerting customers to be vigilant of phishing attempts that may exploit their personal information obtained from the breach.
  • Complimentary Credit Monitoring: The company is offering free identity and credit check services for 12 months. This service can help detect any fraudulent activities at an early stage, thus protecting customers from possible financial fraud (Southern Water’s update for customers).
  • Collaboration with Experts: By working with independent cybersecurity experts, law enforcement, and incident response specialists, Southern Water is ensuring thorough monitoring of the dark web to prevent the leaked data from being misused (Southern Water’s cyber investigation).

The importance of cyber security

In the wake of the Southern Water Cyber Attack, the criticality of cybersecurity for businesses, especially utility companies, cannot be overstated. Our reliance on digital infrastructure exposes us to cyber threats that not only disrupt operations but also compromise the safety of entire communities. At ATS Connection, we recognise the gravity of such threats and offer cybersecurity management services that are essential for the resilience of businesses against cybercrime.

  • Rising Threats: A staggering 73% of IT security professionals in the utilities sector have faced public security breaches, a rate significantly higher than the 55% in other industries. The expanding number of threats and threat actors, from cybercriminals to terrorists, mandates a robust defence system.
  • Severe Consequences: A cyber attack can result in financial loss, reputational damage, and risks to public safety. For utilities, these risks are amplified due to their critical role in society and the interconnectedness of their services.
  • Vulnerabilities to Address: Utilities must contend with legacy systems, evolving compliance standards, and the costs associated with security initiatives. Addressing vulnerabilities such as outdated software and IoT and operational technology (OT) vulnerabilities is paramount.
  • Strategic Approaches: Enhancing cybersecurity involves several strategic measures:
    • Leadership buy-in for a top-down approach.
    • Engaging with security specialists.
    • Updating cybersecurity software.
    • Consistent employee training.
    • Clear system layouts and standard guidelines.
  • Mitigation Strategies: Utilities can mitigate risks by developing strategic threat intelligence, integrating security across regions and organisations, and establishing clear demarcation zones between IT and OT networks.

ATS Connection stands at the forefront of cybersecurity management, providing services that not only protect against the immediate threats of cybercrime but also build resilience for the future. Our expertise is essential in navigating the complexities of cybersecurity for utilities, ensuring the continuous and safe provision of services to the community.

Conclusion

As we reflect on the Southern Water Cyber Attack, the critical importance of cybersecurity management for businesses is unmistakably highlighted. The event serves as a sobering curtain call for organisations to recognise the vulnerabilities in their digital defences and take decisive action. Through a robust cybersecurity management strategy, companies can better shield themselves against these persistent threats, safeguarding both their operations and their customers’ trust.

In an era where cyber threats are evolving with an alarming velocity, the resilience offered by effective cybersecurity measures is not a luxury but a necessity. ATS Connection stands ready to fortify your business against the unforeseen dangers of the digital landscape. With ATS Connection, you don’t just respond to cyber threats; you anticipate and neutralise them, ensuring tranquility in the face of turbulence within the cyber realm.

FAQs

What are the typical consequences of experiencing a cyber attack?

Cyber attacks can be devastating for businesses, leading to three primary types of damage: financial losses, damaged reputation, and legal repercussions. These impacts can harm a company’s profitability, its standing with customers, and lead to potential legal challenges.

Has Southern Water been the target of a cyber attack?

Yes, Southern Water has confirmed that it was the victim of an unlawful cyber attack, which resulted in the theft of some customers’ personal information. The company has issued an apology for the breach.

What operational impacts can a cyber attack have on a business?

The operational impacts of a cyber attack on a business can be severe, including the theft of company funds, loss of income due to operational disruption, incomplete client work or lost business opportunities, reduced productivity, staff downtime, increased insurance costs, and expenses related to the recovery of lost information or equipment.

What is considered the largest cyber attack in history?

The most significant cyber attacks in history include several high-profile incidents such as the Marriott Hotel Data Breach, the WannaCry Ransomware attack, the attack on Ukraine’s Power Grid, the 2014 Yahoo Attack, the Adobe Cyber Attack, the PlayStation Network Attack, the Estonia Cyber Attack, and the NASA Cyber Attack.

What are the harmful effects of a data breach?

Data breaches can lead to a wide range of negative consequences including significant financial losses, damage to reputation, legal issues, regulatory fines, and a significant loss of consumer trust, transforming them from mere security incidents to major crises.

What is the scandal involving Southern Water?

The scandal involving Southern Water, as reported by the BBC, includes the company, along with Thames and Wessex Water, engaging in unauthorised sewage discharges for a total of 3,500 hours in 2022. This was in violation of their permits, with Southern Water specifically illegally discharging sewage 63 times for a total of 792 hours.

What is the most significant cybersecurity threat at present?

The most pressing cybersecurity threats today are Malware, Phishing, and Ransomware, which continue to pose significant risks to individuals and organisations alike.

How can a cyber attack affect an individual?

Individuals can suffer serious consequences from cyber attacks, including damage to their reputation and personal relationships. Attacks such as social engineering or the release of sensitive information can lead to blackmail, public shaming, or defamation, causing significant harm to a person’s personal and professional life.

Concerned about your data?
Get in touch now!

Turn off focused inbox in Outlook

Using Outlook at work? Rolling a setting like this out across a whole team, rather than one mailbox at a time, is part of Microsoft 365 management.

Are you tired of your Outlook app automatically sorting your emails into a “focused” inbox and an “other” inbox? While some people find this feature helpful, others prefer to have full control over their inbox organisation. If you fall into the latter category, you’ll be pleased to know that turning off the focused inbox in Outlook is a simple process.

In this comprehensive guide, we’ll walk you through the steps to disable the focused inbox feature in Outlook across various platforms, including Windows, web, Mac, and mobile. So let’s get started and regain control of your email workflow!

Table of Contents

  1. Introduction
  2. How to Turn Off Focused Inbox in Outlook for Windows
  3. How to Turn Off Focused Inbox in Outlook for Web
  4. How to Turn Off Focused Inbox in Outlook for Mac
  5. How to Turn Off Focused Inbox in Outlook for Mobile
  6. Conclusion
  7. FAQ

Introduction

Outlook, a part of Microsoft Office suite, automatically categories your incoming emails into two sections – a “focused” inbox for important emails and an “other” inbox for less important ones. While this feature can be beneficial for some users, it may not align with everyone’s preferences or workflow.

Fortunately, Outlook provides an option to disable the focused inbox, allowing you to view all your emails in a single unified inbox. In the following sections, we will guide you step-by-step on how to turn off the focused inbox feature in Outlook across different platforms.

How to Turn Off Focused Inbox in Outlook for Windows

If you are using Outlook on a Windows computer, follow these steps to disable the focused inbox:

  1. Launch the Outlook application on your Windows computer.
  2. Click on the View tab located at the top of the Outlook window.
  3. In the View tab, locate and click on the Show Focused Inbox button.
  4. By clicking on the Show Focused Inbox button, the “Focused” and “Other” tabs will disappear from the top of your mailbox.

It’s that simple! You have successfully turned off the focused inbox feature in Outlook for Windows.

How to Turn Off Focused Inbox in Outlook for Web

If you prefer to use Outlook on the web, here’s how you can disable the focused inbox:

  1. Access your Outlook account through a web browser.
  2. Click on the Settings button, usually represented by a gear icon, located at the top right corner of the Outlook window.
  3. In the settings menu, click on Display settings.
  4. Locate the Focused Inbox section and select the Don’t sort messages option under the When email is received subtitle.
  5. Click on OK to save the changes.

Congratulations! You have now turned off the focused inbox feature in Outlook for the web.

How to Turn Off Focused Inbox in Outlook for Mac

Mac users can follow these instructions to disable the focused inbox feature in Outlook:

  1. Open the Outlook application on your Mac.
  2. Navigate to the Organise tab located at the top of the Outlook window.
  3. Under the Organize tab, select the Focused Inbox option.
  4. Once you click on the Focused Inbox option, the “Focused” and “Other” mailbox tabs will disappear, leaving you with a single unified inbox.

Well done! You have successfully disabled the focused inbox feature in Outlook for Mac.

How to Turn Off Focused Inbox in Outlook for Mobile

If you primarily use Outlook on your mobile device, here’s how you can turn off the focused inbox:

  1. Launch the Outlook app on your mobile device.
  2. Tap the menu button, usually represented by three horizontal lines, located at the top of the screen.
  3. Select the Settings button from the menu.
  4. Locate the Focused Inbox option in the settings menu and slide the toggle switch to the Off position.

Great job! You have now turned off the focused inbox feature in Outlook for mobile.

Conclusion

In summary, the focused inbox feature in Outlook can be a useful tool for organising your emails, but it may not suit everyone’s preferences or workflow. If you find that the focused inbox is causing more hassle than convenience, you can easily turn it off.

Whether you are using Outlook on Windows, web, Mac, or mobile, we have provided step-by-step instructions to help you disable the focused inbox feature across various platforms. By following these instructions, you can regain control of your email organisation and view all your emails in a single unified inbox.

FAQ

Q: Will turning off the focused inbox affect how my emails are sorted? A: Yes, disabling the focused inbox feature will remove the “Focused” and “Other” tabs, and all your emails will be displayed in a single unified inbox without any automatic sorting.

Q: Can I enable the focused inbox again if I change my mind? A: Absolutely! If you decide to give the focused inbox another try, you can easily re-enable it by following the same steps outlined in this guide, but selecting the appropriate option to turn it on.

Q: Will turning off the focused inbox affect any other features or settings in Outlook? A: No, disabling the focused inbox only affects how your emails are organised and displayed. All other features and settings in Outlook will remain unchanged.

Q: Are there any alternatives to the focused inbox feature in Outlook? A: Yes, if you prefer a different way of organising your emails, Outlook offers various features and tools such as rules, filters, and categories that can help you customise your email management according to your preferences.

Sharepoint: Empowering Collaboration and Streamlining Workflows

In today’s fast-paced and interconnected business environment, efficient collaboration and streamlined workflows are essential for success. To meet these demands, businesses are turning to Sharepoint, a powerful collaboration platform offered by Microsoft.

SharePoint enables teams to work together seamlessly, share information, and automate business processes, ultimately boosting productivity and driving business growth.

In this comprehensive guide, we will explore the fundamentals of Sharepoint, its benefits, and its various applications.

We will also delve into the latest features and updates in Sharepoint 2019, highlighting its enhanced capabilities and improved user experience.

So, whether you are new to SharePoint or looking to optimise your existing implementation, this guide will provide you with valuable insights and practical tips to leverage the full potential of Sharepoint in your business.

What is SharePoint?

Sharepoint is a collaboration system that empowers business teams to work together effectively. It utilises workflow applications, “list” databases, and other web parts and security features to facilitate seamless collaboration and information sharing across the organisation.

SharePoint also offers robust access control mechanisms, allowing businesses to control who can access specific information and automate workflow processes across different business units.

Microsoft offers Sharepoint in both on-premises and cloud-based versions. SharePoint Online, the cloud version, is part of the broader Office 365 suite, which integrates seamlessly with other Microsoft applications. This integration provides users with a comprehensive suite of tools to enhance collaboration, communication, and productivity.

Benefits of Using SharePoint

Implementing SharePoint in your organisation brings numerous benefits, empowering your teams and driving efficiency. Some key benefits of Sharepoint include:

Increased Productivity and Visibility

SharePoint provides a centralised platform where employees can access and collaborate on documents, projects, and tasks. With features like document co-authoring, version control, and real-time updates, SharePoint enables teams to work together more efficiently and effectively. It also offers visibility into project progress, facilitating better coordination and ensuring everyone is on the same page.

Secure Sharing and Content Management

SharePoint’s robust security features allow businesses to control access to sensitive information and protect their data. It enables secure sharing of documents and files within the business, ensuring that only authorised individuals can access and edit them.

Sharepoint also offers extensive content management capabilities, allowing businesses to organise, categorise, and tag documents for easy retrieval.

Workflow Automation

SharePoint enables businesses to automate repetitive and time-consuming tasks through its workflow capabilities. By defining custom workflows, businesses can automate document approvals, notifications, and other routine processes, saving time and reducing the risk of errors. This automation streamlines business operations and enables employees to focus on more strategic tasks.

Customisability and Scalability

SharePoint is highly customisable, allowing businesses to tailor the platform to their specific needs. It offers a wide range of templates, web parts, and integrations that can be customised to match the organisation’s branding and requirements. Sharepoint is also scalable, accommodating organisations of all sizes, from small businesses to large enterprises.

Sharepoint Use Cases

Sharepoint has been widely adopted across various industries and sectors, serving as a versatile platform for collaboration and content management. Some common use cases of SharePoint include:

Intranet and Document Management

SharePoint serves as an efficient intranet platform, enabling businesses to create a centralised hub for company-wide communication and information sharing. It allows employees to access important documents, policies, and announcements, facilitating seamless knowledge sharing and improving internal communication.

Project Management and Team Collaboration

SharePoint provides a collaborative environment for project teams, enabling them to share documents, track project progress, and communicate effectively. With features like task lists, shared calendars, and discussion boards, Sharepoint empowers teams to work together efficiently and ensures everyone is aligned towards project goals.

Records Management and Compliance

SharePoint offers robust records management capabilities, allowing organisations to maintain compliance with regulatory requirements. It provides features like document retention policies, version control, and audit trails, ensuring the integrity and security of important records.

Business Process Automation

SharePoint’s workflow capabilities enable organisations to automate business processes, reducing manual effort and improving efficiency. By defining custom workflows, organizations can automate tasks like document approvals, contract management, and employee onboarding, streamlining operations and minimizing errors.

External Collaboration and Client Portals

SharePoint allows businesses to collaborate with external stakeholders, such as clients, partners, and suppliers. It provides secure external sharing capabilities, ensuring that sensitive information is only accessible to authorised individuals. Sharepoint’s client portals enable organisations to provide a personalised and secure platform for clients to access relevant documents and communicate with the organisation.

SharePoint Apps: Extending Functionality

SharePoint offers a wide range of apps that can be integrated with the platform to extend its functionality and cater to specific business needs. These apps can add features and options that are not available in the standard Sharepoint platform. Some popular Sharepoint apps include:

Document Management Apps

Document management apps enhance SharePoint’s document management capabilities by providing additional features like advanced search, metadata tagging, and document analytics. These apps facilitate better organization, retrieval, and analysis of documents, making it easier for employees to find the information they need.

Workflow Automation Apps

Workflow automation apps enable businesses to automate complex business processes and streamline operations. These apps provide intuitive interfaces for designing and deploying workflows, allowing non-technical users to automate tasks without relying on IT support. They can automate processes like document approvals, employee onboarding, and contract management, improving efficiency and reducing manual effort.

Communication and Collaboration Apps

Communication and collaboration apps enhance SharePoint’s collaboration capabilities, enabling teams to communicate and work together seamlessly. These apps provide features like instant messaging, video conferencing, and virtual whiteboards, facilitating real-time collaboration and fostering teamwork.

Custom Development Apps

Custom development apps enable organisations to build custom solutions on top of SharePoint. These apps provide development frameworks, APIs, and tools that allow developers to create tailored solutions that meet specific business requirements. Custom development apps empower businesses to extend Sharepoint’s functionality and integrate it with other systems and applications.

SharePoint 2019: Enhanced Features and Updates

SharePoint 2019 introduces several new features and updates that further enhance its collaboration capabilities and user experience. These updates cater to the evolving needs of modern workplaces, empowering employees to work more efficiently and effectively. Some key features of Sharepoint 2019 include:

Modern Team and Site Pages

SharePoint 2019 introduces modern team and site pages, allowing users to customise their pages with modern web parts. Users can embed videos, incorporate feeds from external sources, and add documents and images to create engaging and interactive pages. These modern pages provide a visually appealing and user-friendly interface for sharing information and collaborating with team members.

Improved Lists and Libraries

Lists and libraries in Sharepoint 2019 have a modern look and feel, providing a faster and more intuitive user experience. Users can easily manage columns, interact with lists and libraries on mobile devices, and gain informative insights from data. The improved lists and libraries also offer advanced features like conditional formatting, making it easier to highlight important information and drive data-driven decision-making.

Enhanced Communication Sites

SharePoint 2019 introduces communication sites, which serve as a platform for sharing news, stories, and announcements within the business. These sites provide a customisable and visually appealing interface for showcasing content and engaging employees. Communication sites can be easily created by users, empowering them to share information and collaborate with colleagues without relying on IT support.

Mobile and Desktop Experience

SharePoint 2019 enhances the mobile experience for users, allowing them to access and engage with the business’s group from anywhere, on any device. The improved Sharepoint mobile app provides a seamless and intuitive interface for accessing documents, sites, and lists on the go. SharePoint 2019 also offers improved sync clients for OneDrive for Business, enabling users to sync files and access them offline.

Expanded Customisation Options

SharePoint 2019 provides expanded customisation options, empowering organisations to tailor the platform to their specific needs. Integration with Power Apps and Power Automate (formerly known as Flow) allows organisations to create custom workflows and automate business processes with ease. Sharepoint 2019 also supports SharePoint Add-Ins, providing a flexible and scalable approach to extending Sharepoint’s functionality.

Hybrid Solutions and Integration

SharePoint 2019 enhances its hybrid capabilities, enabling seamless integration between Sharepoint Online and Sharepoint Server. The improved search function offers an intuitive layout and real-time search results, improving the user experience. Sharepoint 2019 also supports hybrid taxonomy, allowing organisations to maintain a centralised managed metadata term store across both cloud and on-premises deployments.

Compliance and Security Enhancements

SharePoint 2019 extends its compliance capabilities, enabling organisations to effectively manage sensitive content and ensure regulatory compliance. The new version provides automatic content detection, central reporting for incidents, and enhanced sensitive content types. Administrators can search for sensitive information in real-time and apply policy templates to control and monitor content, aligning with industry standards and regulations.

Conclusion

In conclusion, SharePoint is a powerful tool for businesses looking to enhance collaboration, streamline workflows, and improve data management. Its potential is truly transformative. However, realising the full benefits of SharePoint requires expert guidance and support, which is where ATS Connection’s IT Support services come in.

Our team of experienced professionals can help you leverage SharePoint to its maximum potential, ensuring a seamless integration into your business processes.

Whether you’re just starting with SharePoint or looking to optimise your existing setup, ATS Connection is here to provide tailored solutions, ensuring that your technology works for you, not the other way around. Contact us today to explore how we can elevate your business with SharePoint and comprehensive IT Support.

How to Plan Your IT Budget for 2027: A Guide for UK Small Businesses

The short answer: For most UK small businesses, an IT budget is mostly per-user running costs: managed IT support (our packages run from £30 to £90 per user per month), Microsoft 365 licences (£5.40 to £16.90 per user per month on an annual plan), plus device replacement, cyber security, internet and phones, and a contingency. For 2027, three changes are already known: analogue phone lines close on 31 January 2027, Windows 10 extended security updates double in price for year two, and Cyber Essentials assessments now automatically fail if multi-factor authentication is missing on cloud services that offer it. Build the budget from the bottom up, per person and per site, rather than as a percentage of turnover.

Last updated: 7 October 2026. Microsoft, Openreach, IASME and GOV.UK figures checked on that date. Prices exclude VAT.

In this guide

What should an IT budget include?

A small business IT budget should cover everything you pay for to keep people working and data safe: support, software licences, devices, security, connectivity and phones, plus a contingency for the things that break. Most of it is predictable once it is written down, because many of the largest IT costs are now charged per user, per month.

Budget lineWhat it coversHow it is usually charged
IT supportHelpdesk, monitoring, patching, endpoint protection, starters and leaversPer user per month, or per device, or by the hour
Microsoft 365 or Google WorkspaceEmail, Office apps, file storage, Teams, and security features on higher plansPer user per month, annual or monthly commitment
Other softwareAccounts, CRM, practice management and design softwarePer user or per licence, usually annual
DevicesLaptops, desktops, monitors, phones and tabletsBought outright, or leased
Cyber securityBackup, email security, Cyber Essentials certification, staff trainingPer user, per device or annual fee
Connectivity and phonesBroadband or leased line at each site, mobiles, VoIP phone systemMonthly per line or per user, on fixed-term contracts
ProjectsOffice moves, migrations, new systems, replacing a serverOne-off, quoted per project
ContingencyUnplanned repairs, replacements and urgent workA set amount held back each year
A typical structure for a small business IT budget.

How much should a small business spend on IT?

We know of no reliable UK benchmark for how much a small business should spend on IT as a share of turnover, and the answer varies too much by sector to be useful. A five-person accountancy practice with sensitive client data needs more security than a five-person trades business that lives on mobiles. It is more accurate to add up what each person and each site actually needs.

The two largest recurring lines for most small offices are support and Microsoft 365. Our own published prices are £30 to £48 per user per month for Core support and £55 to £90 per user per month for Complete IT and security, which adds managed cyber security, Microsoft 365 management, backup and disaster recovery, and Cyber Essentials guidance (see our IT support packages and pricing). Microsoft 365 is billed on top, at these UK list prices:

Microsoft 365 planPer user per month, annual planPer user per month, monthly plan
Business Basic£5.40£6.48
Business Standard£10.80£12.96
Business Premium£16.90£20.28
Microsoft UK list prices excluding VAT, with Teams, checked 7 October 2026. Versions without Teams cost less.

For a fuller comparison of the plans, see our Microsoft 365 business prices guide, which also covers the price changes Microsoft made in July 2026.

A worked example: IT budget for a 15-person office

This is an illustration using our own published prices and Microsoft’s UK list prices, for a single office of 15 people on Microsoft 365 Business Premium. Your figures will differ, especially for devices and connectivity, which depend on your own quotes.

LineMonthly (ex VAT)Basis
Core support£500 to £700ATS published range for a team of 15 (rounded)
Or Complete IT and security£850 to £1,350ATS published range for a team of 15 (rounded)
Microsoft 365 Business Premium£253.5015 users at £16.90, annual plan
DevicesYour quotes, spread monthlyReplacement cost divided by the months you expect each device to last
Broadband and phonesYour current contractsCheck end dates and the analogue line switch-off
Cyber Essentials£440 a year IASME fee (10 to 49 staff)Plus any help with preparation
ContingencyYour choiceHold back an amount for unplanned work
Illustrative only. ATS ranges from our pricing page; Microsoft price from Microsoft UK; Cyber Essentials fee from IASME.

If you are moving from another provider, add a one-off onboarding fee. Ours is typically £500 to £2,000, covering auditing, documenting and taking over your systems properly. You can get a quick per-user estimate for your own headcount from our IT support cost calculator.

What changes should you budget for in 2027?

Three changes are already fixed and will affect many small business budgets over the next 12 months:

  • Analogue phone lines close on 31 January 2027. Openreach says “the deadline is locked” (Openreach, February 2026). Budget for moving phones to VoIP, and check anything else that uses a phone line: alarms, lift lines, card machines and door entry. Our Big Switch Off guide covers what is affected and what happens after the deadline.
  • Windows 10 extended security updates double in price. Microsoft charges commercial customers $61 per device for year one, and the price doubles each year, so $122 for year two and $244 for year three. The updates are cumulative, so joining in year two means paying for both years (Microsoft Learn). Microsoft publishes these prices in US dollars; UK partners usually invoice in pounds, so check the sterling price in your quote. For most businesses, replacing or upgrading the PCs is better value. See our Windows 10 end of life guide.
  • Cyber Essentials is stricter. For assessments started after 26 April 2026, missing multi-factor authentication on any cloud service that offers it, or not installing high-risk or critical updates within 14 days of release, is an automatic fail (IASME). If you need the certificate for contracts or insurance, budget for the work to meet those rules as well as the fee. Our Cyber Essentials cost guide sets out the fees.

One cost is optional rather than fixed: Microsoft now sells Copilot alongside its Microsoft 365 business plans. Treat it as a project with a trial group and a clear purpose, rather than adding it for everyone at once.

Cyber insurance renewals are also worth planning for, because insurers now ask detailed questions about your IT before quoting. Our guide to whether you need cyber insurance explains what they ask.

How to build your IT budget, step by step

The quickest way to an accurate IT budget is to start from what you already have, then add what is changing:

  1. List every person and device. Headcount now and planned hires, and every laptop, desktop, phone and server, with its age and operating system.
  2. List every subscription and contract. Microsoft 365, other software, broadband, phones and support, with the cost, the renewal date and the notice period.
  3. Remove what nobody uses. Licences still assigned to people who have left, and software nobody opens, are common and easy savings.
  4. Plan device replacements. Anything that cannot run a supported operating system needs replacing or upgrading this year. Spread the rest evenly so you are not replacing every laptop in the same month.
  5. Set your security baseline. Multi-factor authentication, endpoint protection, patching, separate tested backups and staff training. If you hold client data or bid for contracts, add Cyber Essentials.
  6. Add the known changes. The analogue line switch-off, any Windows 10 machines, and price rises at renewal.
  7. Add projects. Office moves, new systems or migrations, each with its own quote. If a project needs scoping first, our IT consultancy service can plan and price it.
  8. Hold back a contingency. Something will break or need replacing early. A set amount stops that becoming an argument about budget.

Your IT provider should be able to give you most of this from their own records. If they cannot produce a list of your devices and licences, that tells you something too.

How do you budget for IT across more than one site?

For a business with several sites, per-user support and licence costs stay the same, but each site adds its own connectivity, network equipment and possibly visits. Budget these per site:

  • An internet connection at each site, and a backup connection where downtime would stop work.
  • A firewall and Wi-Fi equipment at each site, and their support.
  • A phone system that works across sites. A single cloud phone system usually replaces separate on-site systems.
  • On-site visits. Ask whether they are included, capped or charged per visit, because this varies between providers and between sites.
  • Shared files and systems. Moving them to Microsoft 365 or another cloud service avoids running a server at each site.

Our support is billed per user, so a 15-person business split across two offices pays the same per-user rate as one in a single office. Whether visits are included depends on location and package, and we set that out in the quote.

Annual or monthly: how does billing affect the budget?

Paying for Microsoft 365 on a monthly plan costs 20% more than committing for a year: Business Standard is £10.80 per user per month on an annual plan and £12.96 on a monthly plan (Microsoft UK), and Business Premium is £16.90 against £20.28 (Microsoft UK). The monthly plan is worth paying for only on licences you expect to add and remove during the year, such as for seasonal staff.

Support contracts and phone contracts work the same way: longer terms are often cheaper per month but harder to leave. Note each contract’s end date and notice period in your budget, so a renewal never rolls over by accident. Our own support is a rolling annual agreement billed per user.

Can you claim tax relief on IT equipment?

Usually, yes. Computers and other equipment bought for the business generally count as plant and machinery (HMRC helpsheet HS252). Businesses that claim capital allowances can usually use the Annual Investment Allowance, which is £1 million a year and lets you deduct the full cost of qualifying plant and machinery from profits. Companies can also claim full expensing on new and unused plant and machinery (not cars), deducting 100% of the cost from profits in the year it was bought. Sole traders and partnerships using the cash basis normally deduct equipment as an expense instead (GOV.UK).

This affects when the cost hits your profits, not how much you pay the supplier. It is general information, not tax advice: your accountant can tell you which allowance suits your business, and whether buying or leasing works out better.

Where can you save without adding risk?

  • Unused licences. Remove licences from leavers promptly, and downgrade people who do not use the features they pay for.
  • Annual commitments. Move stable licences from monthly to annual billing.
  • Duplicate tools. Many businesses pay for file sharing, video calls or security tools that Microsoft 365 already includes on their plan.
  • Licences at cost. Ask your IT provider whether they add a margin to licences. We pass Microsoft and software licences through at cost.
  • Planned replacement. Replacing devices on a schedule usually costs less in lost time than waiting for them to fail.

The one place not to save is the security baseline. Multi-factor authentication, backups and patching cost little compared with recovering from an attack. Cyber Essentials now requires multi-factor authentication and prompt patching, and many insurers also ask about backups.

How ATS Connection helps

We publish our prices so you can budget before you speak to anyone: Core support from £30 per user per month, Complete IT and security from £55, licences at cost and no charge per ticket. Our small business IT support page explains what smaller teams get, and our guide to what outsourced IT support costs compares the pricing models used across the UK.

If you want to know where to spend first, book a free IT review. A senior engineer will review your setup, security, backups and Microsoft 365, and tell you what is worth fixing first. For a price, tell us your headcount and setup through our pricing page and we will give you one figure in writing.

Frequently asked questions

How much should a small business budget for IT?

We know of no reliable UK percentage-of-turnover benchmark for small businesses. Build it per person and per site instead. Managed IT support with us costs £30 to £90 per user per month depending on the package, Microsoft 365 is £5.40 to £16.90 per user per month on an annual plan, and devices, connectivity, security and a contingency are added on top.

What should be included in an IT budget?

IT support, Microsoft 365 or other software licences, devices, cyber security including backup and Cyber Essentials, internet and phones at each site, one-off projects, and a contingency for unplanned work.

Is Microsoft 365 cheaper if you pay annually?

Yes. Monthly plans cost 20% more. Business Standard is £10.80 per user per month on an annual plan and £12.96 on a monthly plan, and Business Premium is £16.90 against £20.28, excluding VAT.

Do I need to budget for the Big Switch Off?

If you still use analogue phone lines, yes. Openreach is closing them on 31 January 2027 and says the deadline is locked. Budget for moving phones to VoIP and for checking alarms, lift lines, card machines and door entry systems that use a phone line.

How much do Windows 10 extended security updates cost?

Microsoft charges commercial customers $61 per device for year one and $122 for year two, and the updates are cumulative. The price doubles each year and is published in US dollars; UK partners usually invoice in pounds. Replacing or upgrading the PC is usually better value.

Can I claim tax relief on computers for my business?

Generally yes. Businesses that claim capital allowances can usually use the £1 million Annual Investment Allowance, and companies can also claim full expensing on new and unused plant and machinery. Sole traders and partnerships using the cash basis normally deduct equipment as an expense instead. Check with your accountant, as this is not tax advice.

Sources

Laptop & PC Repairs

In our fast-paced digital age, laptops and PCs are our trusty companions, our portals to the digital world. From work to play, these devices are essential for our daily lives. But what happens when your faithful companion stumbles, slows down, or encounters a technical hiccup? That’s where ATS Connection’s laptop and PC repair services step in.

A Lifeline in the Digital World

Your laptop or PC is more than a piece of hardware; it’s a repository of your work, memories, and daily tasks. When it starts to falter, panic can set in. But fear not! ATS Connection’s laptop and PC repair services are your digital lifeline, here to revive your devices and rejuvenate your digital world.

Why Choose ATS Connection for Laptop and PC Repairs?

1. Expertise You Can Trust

Our team of skilled technicians boasts years of experience in diagnosing and repairing laptop and PC issues. From hardware glitches to software bugs, there’s no problem we can’t tackle. You can trust our expertise to breathe new life into your devices.

2. Fast and Efficient Service

We understand the importance of your laptop or PC in your daily life. That’s why we prioritize speedy service without compromising on quality. Our efficient repair process ensures minimal disruption to your work and personal life.

3. Comprehensive Diagnostics

Not sure what’s causing the issue with your device? We’ve got you covered. Our comprehensive diagnostics check every aspect, from hardware components to software performance, identifying the root of the problem.

4. Affordable Solutions

Quality repairs shouldn’t break the bank. ATS Connection offers cost-effective repair solutions tailored to your budget. We believe in transparent pricing and providing value for your investment.

Our Laptop and PC Repair Services

Hardware Repairs:

  • Screen Replacement: Cracked or malfunctioning screen? We’ll replace it with precision and care.
  • Keyboard and Touchpad Repairs: Sticky keys or unresponsive touchpad? We’ll have your input devices working like new.
  • Battery Replacement: If your laptop’s battery is failing, we’ll replace it to restore your device’s mobility.
  • Motherboard Repairs: Complex issues like motherboard problems are no challenge for our experts.

Software Solutions:

  • Virus and Malware Removal: Say goodbye to pesky viruses and malware that slow down your system.
  • Operating System Fixes: We can diagnose and repair software issues to ensure your device runs smoothly.
  • Data Recovery: Accidentally deleted important files? We can help you recover them.

Client-Centric Approach

ATS Connection is dedicated to providing the highest level of client satisfaction. Our repair services are always client-centric, and we focus on delivering solutions that meet your unique needs.

Ready to Revive Your Laptop or PC?

If your laptop or PC is showing signs of distress, don’t wait until it’s too late. Contact ATS Connection today to breathe new life into your digital world. Our laptop and PC repair services are the lifeline you need to keep your devices running at their best.

Your digital life deserves the best care, and that’s what ATS Connection delivers. Don’t let device issues slow you down. Contact us today for efficient, affordable, and expert laptop and PC repairs.

Revive, rejuvenate, and restore your digital world with ATS Connection!

Looking at getting a PC or Laptop repaired? Contact us today and let our IT experts work their magic.

Defending Your Inbox

In today’s digital age, email is the lifeblood of business communication. It’s where we exchange critical information, collaborate with colleagues, and connect with clients and partners. Unfortunately, it’s also where a significant threat looms – scam emails. These malicious messages aim to deceive, steal data, and wreak havoc on unsuspecting individuals and organizations. But, fear not! ATS Connection stands at the forefront of the battle against scam emails with cutting-edge cybersecurity solutions driven by intuitive AI learning.

The Scourge of Scam Emails

Scam emails come in various forms, from phishing attempts impersonating trusted entities to fraudulent messages promising riches in exchange for sensitive information. The common thread? They prey on human vulnerability, tricking recipients into taking actions that compromise security.

The Consequences of Falling Victim to Scam Emails:

  1. Data Breaches: Scam emails can lead to unauthorized access to sensitive data, which can be devastating for both individuals and organizations.
  2. Financial Loss: Phishing scams often target financial information, leading to fraudulent transactions and monetary losses.
  3. Reputation Damage: Falling victim to a scam email can tarnish an organization’s reputation, eroding trust among clients and partners.
  4. Operational Disruption: Ransomware attacks, often initiated through scam emails, can cripple business operations.

ATS Connection’s Cybersecurity Arsenal

At ATS Connection, we understand that the evolving threat landscape demands advanced and proactive cybersecurity measures. That’s why our cybersecurity solutions employ state-of-the-art technology, including intuitive AI learning, to combat scam emails and keep your inbox secure.

1. Advanced Threat Detection:

Our intuitive AI algorithms scan incoming emails for suspicious patterns, identifying potential scams before they even reach your inbox. This proactive approach drastically reduces the risk of falling victim to phishing attacks.

2. Real-time Analysis:

In an ever-changing digital landscape, scam emails adapt quickly. Our AI-powered system continuously analyzes email content and sender behavior in real time, staying one step ahead of scammers.

3. Behavioral Analytics:

Our AI doesn’t just look at email content; it also assesses sender behavior. If an email claims to be from a trusted source but behaves unusually, our system raises a red flag.

4. Immediate Threat Response:

When a potential scam email is detected, our system takes swift action, including isolating the threat, blocking the sender, and alerting your IT team or administrator.

5. Employee Training Support:

Prevention is as important as detection. We offer training resources to educate your employees about the dangers of scam emails and how to recognize them.

Why ATS Connection’s Approach Works

1. AI-Powered Precision: Traditional spam filters rely on rule-based approaches that can be easily circumvented by scammers. Our intuitive AI adapts and evolves to stay ahead of ever-changing threats.

2. Reduced False Positives: By analyzing sender behavior in addition to email content, our system minimizes the risk of flagging legitimate emails as false positives.

3. Real-time Protection: Scammers don’t wait, and neither does our AI. Real-time analysis means threats are identified and neutralized as they happen.

4. Comprehensive Security: Our approach doesn’t stop at email; it’s part of a holistic cybersecurity strategy that safeguards your entire organization.

Cost-Effective Security

Beyond the obvious benefits of data protection and peace of mind, ATS Connection’s cybersecurity solutions are cost-effective. The financial impact of a data breach or ransomware attack can be staggering, often far exceeding the investment in advanced cybersecurity measures.

Additionally, the operational disruptions and reputational damage caused by scam emails can have long-lasting consequences. ATS Connection’s cybersecurity solutions not only save you money but also protect your brand and ensure your business continues to operate smoothly.

A Holistic Approach to Cybersecurity

While our intuitive AI learning is a powerful weapon against scam emails, it’s just one part of our comprehensive cybersecurity strategy. We also offer:

  • Firewall Protection: Guarding your network perimeter against intrusions.
  • Regular Software Updates: Patching vulnerabilities before scammers can exploit them.
  • Employee Training: Equipping your team with the knowledge to recognize and report scam emails.
  • Incident Response Planning: Preparing for the worst-case scenario to minimize damage.

Conclusion: Your Digital Guardian Against Scam Emails

In the digital realm, where scam emails can arrive at any moment, having a robust cybersecurity partner is essential. ATS Connection’s cybersecurity solutions, driven by intuitive AI learning, stand as your vigilant guardian, tirelessly scanning for threats, adapting to new tactics, and keeping your digital world secure.

Don’t wait for the next scam email to strike. Contact ATS Connection today and fortify your defenses against this ever-present threat. With our cybersecurity solutions, you can confidently navigate the digital landscape, knowing that your inbox is protected, your data is secure, and your business is safe from the growing threat of phishing emails.

Don’t wait for the unexpected to happen. Contact ATS Connection now to fortify your data’s defenses and secure your business’s future. Your data deserves nothing less than the best protection.