In today’s digital age, email is the lifeblood of business communication. It’s where we exchange critical information, collaborate with colleagues, and connect with clients and partners. Unfortunately, it’s also where a significant threat looms – scam emails. These malicious messages aim to deceive, steal data, and wreak havoc on unsuspecting individuals and organizations. But, fear not! ATS Connection stands at the forefront of the battle against scam emails with cutting-edge cybersecurity solutions driven by intuitive AI learning.
The Scourge of Scam Emails
Scam emails come in various forms, from phishing attempts impersonating trusted entities to fraudulent messages promising riches in exchange for sensitive information. The common thread? They prey on human vulnerability, tricking recipients into taking actions that compromise security.
The Consequences of Falling Victim to Scam Emails:
Data Breaches: Scam emails can lead to unauthorized access to sensitive data, which can be devastating for both individuals and organizations.
Financial Loss: Phishing scams often target financial information, leading to fraudulent transactions and monetary losses.
Reputation Damage: Falling victim to a scam email can tarnish an organization’s reputation, eroding trust among clients and partners.
Operational Disruption: Ransomware attacks, often initiated through scam emails, can cripple business operations.
ATS Connection’s Cybersecurity Arsenal
At ATS Connection, we understand that the evolving threat landscape demands advanced and proactive cybersecurity measures. That’s why our cybersecurity solutions employ state-of-the-art technology, including intuitive AI learning, to combat scam emails and keep your inbox secure.
1. Advanced Threat Detection:
Our intuitive AI algorithms scan incoming emails for suspicious patterns, identifying potential scams before they even reach your inbox. This proactive approach drastically reduces the risk of falling victim to phishing attacks.
2. Real-time Analysis:
In an ever-changing digital landscape, scam emails adapt quickly. Our AI-powered system continuously analyzes email content and sender behavior in real time, staying one step ahead of scammers.
3. Behavioral Analytics:
Our AI doesn’t just look at email content; it also assesses sender behavior. If an email claims to be from a trusted source but behaves unusually, our system raises a red flag.
4. Immediate Threat Response:
When a potential scam email is detected, our system takes swift action, including isolating the threat, blocking the sender, and alerting your IT team or administrator.
5. Employee Training Support:
Prevention is as important as detection. We offer training resources to educate your employees about the dangers of scam emails and how to recognize them.
Why ATS Connection’s Approach Works
1. AI-Powered Precision: Traditional spam filters rely on rule-based approaches that can be easily circumvented by scammers. Our intuitive AI adapts and evolves to stay ahead of ever-changing threats.
2. Reduced False Positives:By analyzing sender behavior in addition to email content, our system minimizes the risk of flagging legitimate emails as false positives.
3. Real-time Protection:Scammers don’t wait, and neither does our AI. Real-time analysis means threats are identified and neutralized as they happen.
4. Comprehensive Security:Our approach doesn’t stop at email; it’s part of a holistic cybersecurity strategy that safeguards your entire organization.
Cost-Effective Security
Beyond the obvious benefits of data protection and peace of mind, ATS Connection’s cybersecurity solutions are cost-effective. The financial impact of a data breach or ransomware attack can be staggering, often far exceeding the investment in advanced cybersecurity measures.
Additionally, the operational disruptions and reputational damage caused by scam emails can have long-lasting consequences. ATS Connection’s cybersecurity solutions not only save you money but also protect your brand and ensure your business continues to operate smoothly.
A Holistic Approach to Cybersecurity
While our intuitive AI learning is a powerful weapon against scam emails, it’s just one part of our comprehensive cybersecurity strategy. We also offer:
Firewall Protection: Guarding your network perimeter against intrusions.
Regular Software Updates: Patching vulnerabilities before scammers can exploit them.
Employee Training: Equipping your team with the knowledge to recognize and report scam emails.
Incident Response Planning: Preparing for the worst-case scenario to minimize damage.
Conclusion: Your Digital Guardian Against Scam Emails
In the digital realm, where scam emails can arrive at any moment, having a robust cybersecurity partner is essential. ATS Connection’s cybersecurity solutions, driven by intuitive AI learning, stand as your vigilant guardian, tirelessly scanning for threats, adapting to new tactics, and keeping your digital world secure.
Don’t wait for the next scam email to strike. Contact ATS Connection today and fortify your defenses against this ever-present threat. With our cybersecurity solutions, you can confidently navigate the digital landscape, knowing that your inbox is protected, your data is secure, and your business is safe from the growing threat of phishing emails.
Take action today and secure your data
Don’t wait for the unexpected to happen. Contact ATS Connection now to fortify your data’s defenses and secure your business’s future. Your data deserves nothing less than the best protection.
The short answer: Cyber security is how a business protects its accounts, devices, email, data and online services from being stolen, damaged or disrupted. The National Cyber Security Centre puts it simply: cyber security “helps individuals and organisations reduce the risk and impact of cyber attacks”. For most UK businesses it comes down to a handful of basics done consistently: multi-factor authentication, up-to-date devices, malware protection, tested backups and staff who can spot a phishing email. It matters because 43% of UK businesses reported a cyber security breach or attack in the last year, according to the government’s latest Cyber Security Breaches Survey.
Last updated: 30 September 2026. Figures checked against the government’s Cyber Security Breaches Survey 2025/2026, NCSC guidance and ICO guidance on that date.
The NCSC defines cyber security as something that “helps individuals and organisations reduce the risk and impact of cyber attacks”. It adds that its core function is to defend the digital services and devices we rely on from online threats, including the data and personal information stored on them or in the cloud.
In a business, that means three things:
Keeping information private. Only the right people can see client files, financial records and email.
Keeping information accurate. Nobody can quietly change bank details on an invoice or tamper with records.
Keeping systems available. Email, files and line-of-business systems keep working, and you can recover quickly if they do not.
Cyber security is not only a technology problem. Many successful attacks on small businesses start with a person being tricked, an account without multi-factor authentication or a device that has not been updated. Good cyber security is as much about habits and process as it is about software.
Why is cyber security important for businesses?
Cyber security is important because attacks on UK businesses are common, most of them involve phishing, and the fallout reaches money, clients and legal obligations. These are the headline figures from the government’s Cyber Security Breaches Survey 2025/2026, published in April 2026:
Measure
UK businesses
UK charities
Reported a cyber security breach or attack in the last 12 months
43%
28%
Experienced phishing attacks
38%
25%
Victims of at least one cyber crime in the last year
19%
14%
Have a formal incident response plan
25%
19%
Insured against cyber security risks in some way
47%
35%
Source: Department for Science, Innovation and Technology, Cyber Security Breaches Survey 2025/2026, published 30 April 2026.
Size makes a difference. The same survey found that 42% of micro businesses, 46% of small businesses, 65% of medium businesses and 69% of large businesses reported a breach or attack. The survey only counts breaches that organisations spotted and chose to report, so smaller firms may be under-counting.
For an individual business, the damage usually shows up in four ways:
Lost time. Staff locked out of email or files, systems rebuilt, and client work delayed.
Lost money. Payment diversion fraud, where a criminal changes the bank details on a genuine-looking invoice, can take a large sum in one transfer.
Legal duties. If personal data is involved, a notifiable breach must be reported to the ICO without undue delay and within 72 hours of becoming aware of it, and inadequate security can lead to an ICO fine.
Client trust and contracts. More clients, insurers and tenders now ask how you protect data, often by asking for Cyber Essentials.
The survey also shows that most breaches are low cost in direct terms: the median perceived cost of the most disruptive breach was £0 for businesses. The risk sits in the minority of cases that are serious, which is exactly what the basics below are designed to prevent.
What are the main areas of cyber security?
Cyber security is usually split into a few areas, each protecting a different part of the business. For a small business, these are the ones that matter:
Area
What it protects
Typical measures for a small business
Identity and access
User accounts and admin rights
Multi-factor authentication, strong unique passwords, separate admin accounts
Email security
The inbox, where phishing arrives
Filtering of links and attachments, impersonation protection, staff awareness
A configured firewall, secure Wi-Fi, changed default passwords
Cloud and data security
Microsoft 365, files and client data
Sharing controls, data loss prevention, access reviews
Backup and recovery
Your ability to get back up and running
Separate, tested backups and a written recovery plan
People and process
Everyone who uses your systems
Phishing awareness, clear payment-checking rules, an incident plan
A practical grouping for small and medium businesses. Larger organisations add areas such as application security and security monitoring.
What are the most common cyber threats to UK businesses?
Phishing is by far the most common attack on UK businesses. The Cyber Security Breaches Survey found phishing was the most prevalent type of breach or attack and was seen as the most disruptive by 69% of businesses and charities that had a breach. The threats worth knowing are:
Phishing. Fake emails or texts that trick someone into clicking a link, entering a password or opening an attachment. See our guide to how to spot a phishing email.
Business email compromise and payment diversion fraud. A criminal gets into, or imitates, a mailbox and redirects a payment. Our article on how conveyancing firms get caught shows how it works.
Account takeover. Stolen or guessed passwords used to sign in to Microsoft 365 or other cloud services. Multi-factor authentication is one of the most effective defences, because a stolen password alone is no longer enough.
Ransomware. Malicious software that encrypts files and demands payment to unlock them, often after the attackers have copied data out.
Malware. Software that steals data or gives attackers remote access, usually arriving by email or a compromised website.
Unpatched software. Known weaknesses in out-of-date systems, which attackers scan for automatically.
Mistakes. Files shared with the wrong person, lost laptops without encryption and emails sent to the wrong address.
What does good cyber security look like for a small business?
Good cyber security for a small business is a short list of basics, done on every device and every account, and checked regularly. The NCSC’s small organisations guide to cyber security groups them into five areas: securing your email, securing your important online accounts, protecting your devices, backing up your data and spotting cyber attacks.
In practice, that means:
Turn on multi-factor authentication for Microsoft 365, banking, accounting software and anything else that holds business data.
Keep devices and software updated, with automatic updates switched on and anything unsupported replaced.
Run malware protection on every laptop and desktop, and make sure it is reporting in.
Back up important data to a separate location, and test that you can restore it.
Limit admin rights so everyday accounts cannot install software or change security settings.
Configure the firewall and Wi-Fi, and change default passwords on routers and other equipment.
Train staff to spot phishing and to check any change of bank details by phone, using a number you already hold.
Write down what you would do in an attack: who to call, how to isolate a device and how to restore from backup.
Cyber Essentials is the UK government-backed certification that shows a business has the basics in place. The NCSC describes it as “the minimum standard of cyber security recommended by the Government for organisations of all sizes”. It checks five technical controls: firewalls, secure configuration, security update management, user access control and malware protection.
It is worth having. Only 5% of businesses hold it, according to the breaches survey, yet the NCSC reported in 2024 that data from the insurer that provides cover with the scheme shows certified organisations are 92% less likely to make a cyber insurance claim (see our guide to whether you need cyber insurance for what insurers ask about your IT). Central government and NHS contracts that involve personal data or certain IT services require it, and a growing number of other buyers ask suppliers for it.
There is no single cyber security law for small businesses, but several rules require you to protect data and report serious incidents:
UK GDPR and the Data Protection Act 2018. Any business holding personal data must keep it secure. A notifiable personal data breach must be reported to the ICO without undue delay and within 72 hours of becoming aware of it. UK GDPR fines can reach £17.5 million or 4% of worldwide turnover, whichever is higher, for the most serious infringements, and £8.7 million or 2% for failures such as inadequate security or not reporting a breach. Our free GDPR health check is a quick way to see where your business stands.
The Cyber Security and Resilience Bill. This bill would update the UK’s rules for essential and digital services and would bring medium and large managed service providers into scope, with an initial incident notification to the regulator within 24 hours and a fuller report within 72 hours. It is still going through the House of Lords and is not yet law.
What should you do if your business is attacked?
If you think your business is under attack, act quickly and in this order:
Contain it. Disconnect affected devices from the network rather than switching them off, and do not wipe them until your IT provider has checked them, as that can destroy evidence.
Call your IT provider so they can lock compromised accounts, reset passwords and check how far the attacker got.
Report it.Report Fraud (the national service that replaced Action Fraud in December 2025) asks businesses suffering a live cyber attack to call 0300 123 2040, 24 hours a day. In Scotland, call Police Scotland on 101.
Tell the ICO within 72 hours if personal data may have been affected and the breach is notifiable.
Warn clients and suppliers if your email was used to send fraudulent messages, and call your bank at once if money has been sent.
Restore from backup and learn from it, fixing the weakness that let the attacker in.
Should you outsource cyber security?
Most small businesses do not have a security specialist on the payroll, so outsourcing is common. The breaches survey found that 44% of micro businesses now use an external cyber security provider, up from 39% the year before. Our article on reasons to outsource cyber security sets out the case.
At ATS Connection, cyber security is part of how we run managed IT services for clients, for a fixed monthly price. Our Complete IT and security package runs from £55 to £90 per user per month; see our IT support pricing or our cyber security services. If you want to know where you stand today, take our free IT security review.
Frequently asked questions
What is cyber security in simple terms?
Cyber security is protecting your accounts, devices, email, data and online services from being stolen, damaged or disrupted. The NCSC describes it as helping individuals and organisations reduce the risk and impact of cyber attacks.
Why is cyber security important for a business?
Because attacks are common and costly when they succeed. The Cyber Security Breaches Survey 2025/2026 found that 43% of UK businesses reported a breach or attack in the last 12 months. A serious incident can stop work, lead to payment fraud, trigger a duty to report to the ICO within 72 hours and damage client trust.
What are the main types of cyber security?
For a small business the main areas are identity and access, email security, device security, network security, cloud and data security, backup and recovery, and people and process.
What is the most common cyber attack on UK businesses?
Phishing. The Cyber Security Breaches Survey found phishing was experienced by 38% of UK businesses in the last year and was the most prevalent and most disruptive type of attack.
Is Cyber Essentials a legal requirement?
No, Cyber Essentials is not a legal requirement for most businesses. The government recommends it as the minimum standard for organisations of all sizes. Central government and NHS contracts involving personal data or certain IT services require it, and a growing number of other buyers ask for it.
How do I report a cyber attack in the UK?
Businesses suffering a live cyber attack should call Report Fraud, which replaced Action Fraud, on 0300 123 2040 at any time of day. In Scotland, call Police Scotland on 101. If personal data is affected and the breach is notifiable, report it to the ICO within 72 hours.
How much does cyber security cost for a small business?
It depends on size and needs. Many of the basics come with the right Microsoft 365 plan and good IT management. At ATS Connection, our Complete IT and security package costs £55 to £90 per user per month, and Cyber Essentials certification fees start at £320 plus VAT for micro businesses.
White label IT support services can benefit your businesses’ growth, whether you’re selling your own products/ or want to add IT support services to your current white labelled products you offer. White label IT solutions allows you to scale at a pace that suits you and has no outlay financially until you are making money yourselves.
What is white label IT support?
White label IT support allows you to offer your end users IT services with the benefit of you not needing to hire any staff members as the services are carried out under your identity and performed as if they were in-house IT staff.
White label IT support services come in various forms:
White label IT help desk – With this option, your white label partner provides technical support to your end users. They answer questions, troubleshoot problems, and offer general help to your IT customers via phone, email or remote it services.
On-site IT support – With on-site services, IT engineers go to your client’s location to fix IT problems, maintain systems, or replace hardware.
You can increase the scope of your services without hiring more people by white labelling IT solutions. White labelling is something to consider if you lack the resources to provide effective IT solutions, either because you’re a small business or because it is growing quickly. Here is why white labelling is worthing looking into in these circumstances:
The more complicated issues affecting your end customers might be better handled by a third party with a diversified team of experts.
You can provide service around-the-clock, which can be a significant selling factor for your company.
White labelling is cost-effective. Without having to hire a large workforce or worry about managing or training your IT staff, your business can make use of experienced IT professionals.
Is white labelling IT profitable?
This is the big one! Is White Labelling even going to have a chance of making your business profitable?
Yes!
With white label IT support you get to offer our services at a set fee and in return you choose what to charge your clients! On average, our white label IT partners make around 50% – 70% profit on each end user.
The key? Finding an IT partner you can trust
Finding the right white label IT partner is crucial to any partnership working. Both parties need to work in unison and ensure they are on the same page at all times.
When you partner with ATS Connection, you can select the type of partnership that is best for your business.
You can exert as much control as you like on the procedure, branding, and client experience thanks to our flexibility.
Find out more on our white labelling IT solutions here or contact us on 01903 255 159.
More and more businesses are looking to move away from server infrastructure, replacing it with cloud computing. Why? Well theres lots of reasons and we’ll be covering only some within this article explaining the advantages and dissadvantages of each.
Money
Cloud server:
Having a cloud server costs a lot less, it doesn’t demand a special room with air conditioning. All it requires is an internet connection, whether they is standard broadband or 4G/5G.
All you’ll pay for is what you need and the storage grows as you grow. No more continuous running costs, only a monthly flat fee based on what your business needs.
Cloud servers are essentially a VPS stored in a compliant data centre. A typical situation is an IT provider (in this instance ourselves) will own some servers which we would segment up for individual clients. This way we know that the servers are protected 24/7 in a UK data centre which is constantly managed.
We take where we get our servers from very seriously and that is why we have partnered with a UK based company running servers from 100% renewable energy.
A typical cost for a cloud server can range between £50 – £200 pcm depending on your storage size.
On-site server:
Naturally one of the main reasons going against on-site servers is cost, businesses want to receive a good product for the cheapest price. Sinking money into an old on-site server is not the way to do that.
On-site servers have an extremely high running cost.
They take up space, usually a separate locked room something that some small businesses might not have access to.
Servers also get hot, they require air conditioning and to be kept at a stable temperature. Running air-conditioning units costs a lot of money and they don’t stop running even when the office closes.
Servers consume a lot of power just by themselves without the addition of air-con. Something that can’t be turned off which constantly drains power while upping your bill.
Also if that server is in your building it becomes your problem if something goes wrong. Maintenance bills can be pricy especially if you haven’t been taking care of your server with regular checks and upgrades. If your server goes down your team might not be able to work until its fixed.
So how much do servers cost? On average you are looking at a minimum of £1000 for a basic server going upwards to £25,000 for a high end server.
Responsibility
Cloud server:
With cloud servers you are more than likely protected by the IT provider you are getting the cloud server from. There is also a lot less responsibility in general with cloud servers due to their set up.
On-site server:
With your on-site server ultimately everything is your responsibility unless you pay an IT provider. Uptime, maintenance, security and backups, each of these components holds a cost, if that cost isn’t met then it carries a risk, if the server goes down then how are your employees going to work? If your server gets hacked, how detrimental will that be to your company?
Often overlooked security is one of the most important subjects, if an invader gains access they can wreak all sorts of mayhem. If your company stores customer information then theres a good chance that you’re going to receive a massive fine from the government.
If your server is managed by someone else then ultimately everything above is their responsibility, and ultimately they are experts in their field when it comes to this. These people know what they are doing so your server is in safe hands.
Enterprise features
Cloud server:
The bulk of this is handled for you in the cloud, and for the typical small or medium business, the redundancy, resilience, and reliability are considerably higher than they would be with an on-premises solution.
Take email as an illustration. One or two servers might support an on-premises email service used by a typical small or medium-sized business. These will be backed up, and in more sophisticated circumstances, they might have copies elsewhere that might be brought online in the event of a breakdown.
On-site server:
Large businesses spend a significant portion of their IT spending removing single points of failure as a follow-up to shared responsibility. Redundancy is first introduced by adding more servers, firewalls, switches, and internet connectivity, but in many circumstances, this leads to one or more completely duplicate infrastructure sets.
Smaller firms are just as dependent on working IT as any large corporation, but they rarely have the resources or room to provide that type of resilience.
Conclusion
This is only a small sample of what cloud solutions might be able to do for your company. The main takeaway is that in order to realise the benefits, it’s crucial to look beyond the up-front or continuing charges and analyse your present solution’s total cost of ownership before comparing it to the new benefits and risk reductions. You’ll probably discover that taking the risk will benefit you more in the long run. If you would like a second opinion on that comparison, our IT consultancy service can review your current setup and cost both options.
Email, Phishing compromises are more personalised whilst malicious attachments and spoofed domains are more convincing. These cyber kill chains are nuanced, and potentially devastating for targets. That’s why nowadays it’s incredibly important to have the best top-tier, layered security protocols protecting you and your business.
What is a Cyber Kill Chain?
Simply the Cyber Kill Chain is the course of actions that a cyber criminal will perform to attack their victim. Most of these kill chains follow a core structure with variations based on the attack type and personal style of the cyber criminal.
The phases usually go in the order of;
Breaking in
The first step of any cyber criminal is to access the system undetected to avoid raising any alarms. This first step normally causes no immediate damage. While there are many ways of breaking into an employees system, phishing scams has been reported as one of the most common choices of accessing a system. Malicious attachments which can lead to malware being spread throughout the system without your knowledge.
Once Malware has been integrated within the system then it is an extremely difficult and expensive endeavour to then get rid of it. In 2018 a shipping conglomerate had malware spread through the entire system costing the company £300 million.
Investigating your system
The next step a cyber criminal would take is to investigate the system familiarising themselves with it. They will use specialised tools to identify areas that have vulnerabilities or areas with valuable assets like bank details or logins. More times than not this process is completely undetectable.
A report from IBM found that the average breach goes undetected for 212 days. However, depending on the type of attack these cyber kill chains can might only span the course of a few days or even hours.
Executing an Attack
Once your system has been breached and surveyed and the cyber criminal has determined that they have enough information on your device and its contents they will execute the attack. This is when the cyber criminal decides the fate of your system.
They could hold it for ransomware locking all your files and data until you pay a sum of money for them to release them. Even if you pay they may not release the files demanding more money.
They could just want to steal your information which can then lead to identity theft causing you problems in the long run.
Some hackers just like to destroy your system for no apparent reason. Activating software changing system code to make it unusable or removing it entirely along with all your files.
It is important to note that this is a version of a cyber kill chain, kill chains are very customisable, sequential processes. The process is all dependant on what the cyber criminal wishes to gain out of their work.
Usually the gain is always financial. Hackers can and will attack anyone, conducting small raids on individuals or more sophisticated large attacks on companies. Hackers can cause a lot of damage and trouble in an extremely short amount of time.
How to protect yourself from cyber criminals
There are two common threats that your business will face. Business email compromise (BEC) and ransomware. With a BEC attack cyber criminals harvest accounts and credentials from an executive or management team, impersonate them and persuade employees and clients to release valuable information. This can span from employee payment information and wire transfers.
Ransomware also often starts with email, and has become the most common from of extracting money from small to medium sized businesses. In order to counter threats like these you need to have a layered security approach that can counter unique attack types and kill chains.
Security Monitoring
A solutions such as a Security Operations Service combines cutting-edge Security Information and Event Management technology and established threat intelligence to track privilege elevation, data leaks and breaches, suspicious network activity, user identity and account lockouts and real time endpoint monitoring.
Endpoint protection provides a safety net after an employee engages with potential malicious content, this catches the malicious content before it can spread into the system.
This gives your IT team a chance to intervene so they can identify and eliminate threats as well as take precautions on other machines.
Firewalls
Firewall is a word thrown around but not many people actually know what it does. Simply it stops any non-requested data from entering a network. That’s because it identifies the requested code and will only let that exact code through.
Firewalls can also be configured by your IT team so strict parameters can be set around inbound and outbound mail. They can establish certain rules that need to be met for things such as attachments, links, forwarding and geofencing. Other tools can be utilised such as single-sign-on and two factor authentication for an additional layer of behavioural analysis.
Endpoint protection identifies suspicious user actions and behavioural patterns. There are many programs such as Microsoft InTune which provides a single dashboard which your IT team can monitor and respond to.
With InTune for example an IT team can view enrolled endpoint devices and accessed resources, ensure that the compliance meets with organisational standards, access reports on (non)compliant users and devices, remote wipe data from lost, stolen or retired devices and push certificates for easy access to WiFI or network VPNs.
Here at ATS Connection we want to ensure that your business is protected from cyber criminals trying to access your private data. The cost of setting up a great cybersecurity is far less than the costs that you could receive if you lost data. Outsourcing your cyber security have great benefits too!
We offer great cyber security packages for both businesses and individuals along with 24/7 monitoring.
Remote Monitoring and Management software is one of the most useful and important software programs that we use as an IT company.
It lets us support our clients wherever we are, and wherever they are, and it is the tool behind our remote IT support.
RMM allows us to support our clients faster and address problems with minimal user interruption. Support-wise, RMM allows us to remotely control the computer, we can see the screen and perform inputs such as typing. This means we don’t have to always go on-site to resolve an issue, reducing callout charges.
More than a remote
RMM does so much more than just letting us control a computer. We can completely review the workings of the computer such as how hard certain components are working, storage space, fan speed, heat generated, and more. With this information we’re alerted to problems before something can go critically wrong, we can take actions to stop an issue progressing.
Scripts and Automation
Scripts and automation give us more time to focus on the important things. We can set certain alerts and severity scaling to warrant appropriate scripts. Usually used on low to medium scale alerts an automatic response can be made, scripts can be sent and run through the RMM to fix small issues.
We run scheduled thorough audits on many of the devices we cover to scan for problems where we can then take action based on the output. Security audits are also performed via script deployment, which return detailed security reports.
Quick jobs are also very helpful in performing pre-written scripts, this can let us administer patches and updates without interruption. We can also install some apps, which makes deploying software over a large company much quicker.
Policies
Polices can be applied globally or to certain sites, depending on how managed a company wants their devices. Policies can also be configured with scripts and automation, some companies may always require a certain software in their devices. With policies, software can automatically be downloaded and kept up to date if it were removed or if a new device was added.
Policies are also great for making sure that software programs and operating systems are up-to-date, improving the security of devices and their performance.
Reports
When requested by the client or needed by us, reports globally or per site can be generated and give us an outline of;
Usage over a period of time.
Current status of installed software programs and versions.
Storage capacity.
Average lifespan of the device.
Want more control over your business IT system?
ATS Connection can offer your business fully and partially managed IT Support. All our retainer business clients are enrolled to our RMM software, so there’s no extra costs. We always stay proactive with our clients systems, and RMM makes that easier and more precise.
SoGEA stands for Single Order General Ethernet Access, a bit of a mouthful, probably best we stick to the abbreviation. This line utilises the existing copper phone line to connect the network, these phone lines can be found in almost every building in the country. However, instead of phone calls they are repurposed to transfer data.
SoGEA is an interim solution for areas that currently don’t have access to fibre connection. SoGEA is quicker and cheaper to install than Fibre to the Cabinet (FTTC) because it doesn’t require any new infrastructure. Also due to it being a single order line issues can be identified and resolved quickly, another perk is the better service that you’ll receive. Without the phone line interfering traffic is gone meaning you receive better connection speeds.
What’s the difference between SoGEA and FTTC?
Fibre to the cabinet is currently the most common type of broadband connection. Utilising a blend of copper and fibre wires to deliver your property broadband. However, your top speed will always be determined by the slowest part of the wire.
The main difference is mainly within the infrastructure, currently a FTTC connection has a phone line with a fibre broadband connected over the top of it.
Openreach has launched SoGEA, this means no copper phone line is needed. SoGEA broadband just needs to be ordered with no line rental to worry about.
What’s the difference between SoGEA and FTTP?
Fibre to the Premises/Property is a fully fibre connection, from the supplier to the property it is complete fibre cable. Full fibre is becoming available to both residential and business properties but Openreach faces a challenge to supply all the properties with full fibre. SoGEA provides an interim for your property if fibre is not yet available.
FTTP has un-rivalled speeds, if FTTP is available it should be the first choice. Realistically FTTP is the fastest we will be able to go for a while unless we find a way to move something faster than light.
Both are easy to install, cost-effective, and easy to fix. FTTP is an ideal solution for businesses which rely on high internet speeds especially with the move over to VOIP systems.
Do you need to move to SoGEA?
You may know that Openreach are shutting down the ISDN and PSTN network in 2025, many businesses and households still use this connection despite the shutoff being right around the corner. If Fibre isn’t available for you then you may need to consider moving to SoGEA sooner than later.
Need to move? We can do that for you. We offer super-fast SoGEA and full fibre broadband options.
Want to know what speeds you can reach? Get in touch today for a quote same day.
The short answer: An IT support provider is an external company that looks after a business’s technology: fixing problems when staff get stuck, and keeping computers, the network, Microsoft 365 and security in good order so problems happen less often. Most small and medium businesses now pay a fixed monthly fee per user for this, known as managed IT support, rather than paying by the hour when something breaks. In the UK that typically costs £30 to £90 per user per month.
Last updated: 29 September 2026. Written by the ATS Connection team from our own service and pricing, with government and NCSC sources linked below.
A good IT support provider acts as your IT department. The work splits into what happens when someone asks for help, and what happens in the background so they need to ask less often.
When your team needs help
Helpdesk support by phone, email or a ticket portal, for anything from a locked account to a printer that will not print.
Remote fixes, where an engineer connects to the user’s computer securely and resolves the issue while they watch.
On-site visits for hardware faults, network problems and installations that cannot be done remotely.
Starters and leavers: setting up accounts, laptops and access on day one, and removing access the day someone leaves.
In the background
Monitoring of computers, servers and the network, so failing disks, full storage and offline devices are spotted early.
Patching: installing security updates for Windows, applications and firewalls on a schedule.
Cyber security: endpoint protection, email filtering, multi-factor authentication and the controls needed for Cyber Essentials.
Microsoft 365 management: licences, mailboxes, Teams, SharePoint permissions and security policies.
Backup and recovery: making sure data is backed up and that restores actually work.
Planning: hardware replacement cycles, budgets and advice on what to fix first.
Supplier management: dealing with your broadband provider, software vendors and phone system on your behalf.
What types of business IT support are there?
There are four common ways to buy IT support, and many businesses combine two of them.
Type
How it works
How you pay
Best for
Break-fix (ad hoc)
You call when something goes wrong
By the hour or per job, typically £75 to £150 an hour
Very small businesses with simple IT
Managed IT support
The provider runs your IT proactively under a service agreement
Fixed monthly fee, usually per user
Most businesses of 5 to 250 staff
Co-managed IT support
The provider works alongside your in-house IT person or team
Support can also be remote, on-site or both. Most issues are now fixed in minutes through remote IT support, but you still want a provider that can get an engineer to your office when a switch fails or a new starter needs a desk setting up. That is why local IT support providers remain popular even as more IT moves to the cloud.
What is the difference between proactive and reactive IT support?
Reactive IT support fixes problems after they happen. Proactive IT support works to stop them happening, by monitoring systems, installing updates, replacing ageing hardware before it fails and closing security gaps before they are exploited.
Reactive (break-fix)
Proactive (managed)
When work happens
After a fault is reported
Continuously, plus when faults are reported
Security updates
When someone remembers
On a schedule, tracked and reported
Provider’s incentive
Paid more when things break
Paid the same, so better off when things do not break
Cost pattern
Unpredictable
Fixed monthly
Knowledge of your setup
Relearned each visit
Documented and built up over time
The incentive row is the one that matters. On an hourly model, a provider earns more when your IT is unreliable. On a fixed fee, the provider only makes money if your systems stay healthy, so its interests line up with yours.
How much does business IT support cost?
In the UK, managed IT support for a small or medium business usually costs between £30 and £90 per user per month, depending on how much security and compliance work is included. Ad hoc support runs at around £75 to £150 an hour.
We publish our own prices, which is still unusual. Core support is £30 to £48 per user per month and Complete IT and security is £55 to £90. For a team of 15 that is roughly £500 to £700 a month on Core, or £850 to £1,350 a month on Complete. Microsoft licences and hardware are billed separately, at cost. The detail is on our IT support pricing page, and our guide to how much IT support costs explains the pricing models the market uses.
The figure to compare against is the alternative. A single in-house IT hire costs upwards of £2,500 a month before employment costs, and one person cannot cover holidays, sickness and every specialism.
Do you need an IT support provider?
If nobody in your business is responsible for IT, you already have a provider: it is whoever gets asked, usually the most technical person, doing it instead of their real job. These are the signs it is time for proper support:
The same problems keep coming back, and nobody knows why.
Nobody can say for certain that your backups work.
You are not sure who still has access to your Microsoft 365 or other systems.
A customer, insurer or tender has asked about Cyber Essentials or your security controls.
Staff lose hours each week to slow computers, Wi-Fi or login problems.
You are growing, and onboarding people is taking longer than it should.
The risk is not theoretical. The government’s Cyber Security Breaches Survey 2025/2026 found that 43% of UK businesses identified a cyber breach or attack in the previous 12 months, and only 25% had a formal incident response plan.
How do you choose an IT support provider?
The NCSC published guidance in November 2025 on choosing a managed service provider, aimed at small businesses. Combined with what we see when businesses switch to us, these are the questions worth asking:
Are you Cyber Essentials certified? The NCSC recommends using providers with recognised certifications such as Cyber Essentials Plus. A provider with access to all your systems should meet at least the standard it asks of you.
What response time do you guarantee, in writing? Ask for the response and resolution targets in the contract, not the brochure.
What exactly is included, and what is billed extra? Look for per-ticket charges, fair use limits, and whether on-site visits and projects cost more.
Who owns the admin accounts? Your business should own its Microsoft 365 tenant, domain and admin credentials, with the provider given access, not the other way round.
How do you protect your own access to our systems? Expect multi-factor authentication, least-privilege access and logging.
What happens if we leave? Check the notice period and what documentation and handover you get.
Can I speak to a client like us? References from businesses of a similar size and sector tell you more than any website.
ATS Connection has provided business IT support since 2015 from offices in Arundel and Chichester, and looks after more than 100 businesses across Sussex and the UK. Our average response time is under 15 minutes, support is unlimited during business hours with no per-ticket charges, and we are Cyber Essentials certified. See IT support across Sussex or our outsourced IT support for businesses further afield.
Frequently asked questions
What is an IT support provider?
An external company that looks after a business’s technology, fixing problems when staff need help and keeping computers, networks, Microsoft 365 and security maintained so problems happen less often.
What does business IT support include?
Typically helpdesk support, remote and on-site fixes, monitoring, security updates, endpoint protection, Microsoft 365 management, backups, starters and leavers, and IT planning. What is included varies by provider and contract, so check the service agreement.
What is the difference between an IT support provider and an MSP?
An MSP, or managed service provider, is an IT support provider that runs your IT proactively for a fixed monthly fee under a service agreement. Some IT support providers only offer break-fix support paid by the hour.
How much does IT support cost for a small business?
Managed IT support in the UK usually costs £30 to £90 per user per month. ATS Connection’s Core support is £30 to £48 per user per month, and Complete IT and security is £55 to £90.
What is proactive IT support?
IT support that prevents problems rather than just fixing them, through monitoring, scheduled security updates, hardware planning and closing security gaps before they are exploited.
Is remote IT support enough for a small business?
Most issues can be fixed remotely, but hardware faults, network problems and installations sometimes need an engineer on site. A provider that offers both is the safest choice.
For the majority of businesses, maintaining a solid security position is a significant challenge. All businesses are at risk of becoming victims of the advanced cyberattacks that are growing more prevalent. Businesses often use new technologies that concentrate on prevention, detection, and remediation to lower this risk.
But this technology alone won’t stop a cyberattack; it needs to be used by knowledgeable security experts. To make sure their business is as secure as possible, many companies opt to outsource this to a reliable third party. This post will go over 5 reasons for outsourcing cyber security by businesses.
Access to cyber security experts
Many businesses rely on their internal departments to manage both their infrastructure and cyber security. This can be a daunting endeavour, leading to a weak security posture and a stressed-out workforce, depending on the size of the business and the workload of the IT department.
This is made worse by the fact that there is now a scarcity of cybersecurity professionals, which makes it challenging for organisations to hire them.
A business has access to a group of cyber security experts when they outsource their cybersecurity to a reliable third party.
Their expertise guarantees that they will be able to precisely identify and address weaknesses in a business’s security set up, and most significantly, they are knowledgeable about the most recent cyberthreats and the most effective defences against them.
Reduced costs
Employing a new security specialist or retraining existing staff may be very expensive for businesses of all sizes.
It might be challenging to justify hiring someone specifically for security for smaller businesses. A business will still have to pay for cyber security solutions in addition to the expense of hiring or training personnel.
While the cost of outsourcing a business’s cybersecurity is often a fixed monthly sum that covers the technology as well as access to the team of cyber security experts.
Anytime a business weighs the expense of outsourcing security, they should also take into account the typical cost of a cyberattack because this can help determine the return on investment.
Decrease workload
If your business has internal IT staff, there’s a good chance they’re already swamped with support requests and managing the IT infrastructure.
They frequently end up having insufficient time to focus on finding the ideal security solution or monitoring threats once the solution has been put in place.
When cybersecurity is outsourced, a third-party supplier is in charge of the solution’s strategy, execution, and monitoring. As a result, internal IT departments have more time to devote to developing IT solutions that advance the company and enhance the experiences of both customers and other employees.
Improved incident response time
It is essential for a business to act swiftly after being the target of an attack to limit further damage and downtime. An internal IT team might not be aware of a cybercriminal entering a network or system over the weekend until Monday am.
Numerous cybersecurity service providers provide protection, detection, and remediation around-the-clock to guarantee that, once an assault happens, someone is prepared to act quickly.
Additionally, it is less expensive than hiring an internal crew to work on the weekends and through the evenings to provide round-the-clock security.
More advanced technologies
Numerous cyber security technologies, such as endpoint protection, email protection, autonomous detection, and many more, are made to perform particular tasks.
Because it would be too expensive and time-consuming to provide training for every available option, an internal IT staff would not have experience with all of these cutting-edge technology.
If a business outsources their cyber security requirements, it will be protected by a team of experts with knowledge of a variety of cutting-edge cybersecurity tools. This team will be able to reliably provide insights into which technologies are worthwhile for a business to invest in.
The short answer: Eligible UK charities can get Microsoft 365 Business Basic free for up to 300 users. Business Premium costs £4.20 and Business Standard £2.70 per user per month, about 75% below the normal business price. The old grant of free Business Premium licences ended in 2025, so charities that relied on it now pay the discounted price at renewal.
Last updated: 29 September 2026. Prices and terms checked against Microsoft’s UK nonprofit plans page and Microsoft for Nonprofits documentation on that date. Prices exclude VAT.
These are Microsoft’s current UK nonprofit prices, per user per month, on an annual subscription and excluding VAT, compared with the price a business pays.
Plan
Nonprofit price
Normal business price
What it is for
Microsoft 365 Business Basic
Free (grant, up to 300 users)
£5.40
Email, Teams, 1TB OneDrive, web and mobile Office apps
Microsoft 365 Business Standard
£2.70
£10.80
Adds the desktop Office apps
Microsoft 365 Business Premium
£4.20
£16.90
Adds device management, Defender and data protection
Microsoft 365 E3
£8.40
£33.50
Enterprise plan for larger charities
Microsoft 365 E5
£20.60
£51.60
Enterprise plan with advanced security and compliance
Nonprofit prices from Microsoft’s UK nonprofit plan pages; business prices from Microsoft’s UK business and enterprise plan pages. Checked 29 September 2026.
Microsoft advertises nonprofit discounts of up to 75% on Business Premium and Business Standard, and at current UK prices both work out at 75% below the business price. Business plans, including the discounted ones, are designed for organisations of up to 300 users. E3 and E5 have no such limit.
What changed in 2025 and 2026?
Microsoft withdrew its most generous charity offers in 2025. According to Microsoft’s nonprofit updates log:
The Microsoft 365 Business Premium grant and the Office 365 E1 grant were discontinued for renewals on or after 1 July 2025. Existing grant licences expire at the charity’s next renewal date and do not renew.
The Business Basic grant continues, free for up to 300 users.
Discounted plans replace the grant. Charities that had free Business Premium now move to the £4.20 discounted price, or down to the free Basic grant.
Then on 1 July 2026 Microsoft raised commercial Microsoft 365 prices. Microsoft’s pricing FAQ says nonprofit pricing is adjusted in line with commercial pricing, with the nonprofit discount set at 60 to 75%. The UK prices in the table above are the current ones.
If your charity’s licences were on the old Premium grant, check your renewal date now. When the grant licences lapse, users lose access to the Premium features and desktop apps unless you have moved them to a paid or granted plan first.
What rules come with the free grant?
The free and discounted licences come with conditions, set out on Microsoft’s UK nonprofit page:
Grant licences are for paid staff and unpaid executive staff who lead the organisation. Discounted licences can be used for staff and volunteers.
Use them or risk losing them. Microsoft expects at least 85% of assigned grant licences to be actively used, and can withhold future grants if usage falls below that.
Is your charity eligible?
Microsoft’s eligibility criteria require a nonprofit or non-governmental organisation with recognised legal status in its country, operating on a not-for-profit basis with a mission that benefits the community. Microsoft excludes:
Government organisations and agencies.
Schools, colleges, universities and other formal educational institutions (these have separate education pricing).
Healthcare organisations, other than specific categories in the United States.
Professional and trade associations, political organisations, trade unions and fraternal organisations.
Professional and semi-professional sports organisations, and financial institutions.
Public libraries and public museums are eligible. In the UK, the simplest evidence is registration with the Charity Commission for England and Wales, the Office of the Scottish Charity Regulator or the Charity Commission for Northern Ireland. Charity Digital notes that smaller organisations recognised by HMRC as charitable can also qualify, while community interest companies and social enterprises generally do not.
How do you apply for Microsoft’s nonprofit offers?
You apply through Microsoft’s Nonprofit Hub. Microsoft’s registration guide sets out the process:
Go to nonprofit.microsoft.com and choose to apply, signing in with a Microsoft account you will keep, ideally your organisation’s admin account.
Enter your organisation’s legal name, charity registration number, address and a public website. Microsoft asks for a phone number that is not VoIP-only.
Agree to Microsoft’s nonprofit compliance terms.
Wait for validation. Microsoft’s documentation says this takes up to 3 days, while its FAQ allows up to 7 business days.
Once approved, activate the Business Basic grant and buy any discounted licences from the Nonprofit Hub or through a Microsoft partner.
To avoid delays, make sure the name on your website matches the charity register exactly, double-check the registration number, and apply from an organisational account rather than a personal one.
Which plan should a charity choose?
Match the plan to the data each person handles. This is the approach we take with the community organisations we support:
Free Business Basic for most volunteers and light users. They get a proper organisational email address, Teams and shared files in the browser, at no cost.
Business Premium for anyone handling beneficiary, donor or safeguarding data. At £4.20 it adds the controls that stop that data leaking: device management, Conditional Access, Defender for Business and data loss prevention. For most charities this is the best value security spend available.
Business Standard only if someone needs desktop apps but no sensitive data. At £2.70 it sits between the two, but the extra £1.50 for Premium usually pays for itself in protection.
Charities are targets too. The government’s Cyber Security Breaches Survey 2025/2026 found that 28% of charities identified a breach or attack in the previous 12 months, and only 19% had a formal incident response plan.
We moved Arundel Museum onto Microsoft 365 and took over its broadband and phones after a previous provider left costly problems behind. If you would like the same for your organisation, see our IT support for charities.
What other Microsoft offers are there for nonprofits?
Microsoft publishes these offers in US dollars, and availability varies by country:
Microsoft 365 Copilot: a 15% nonprofit discount on the Copilot add-on. Copilot Chat is included in the Microsoft 365 plans at no extra cost.
Volunteers on enterprise plans: for each E3 or E5 licence, Microsoft allows up to five additional F3 licences for volunteers.
Dynamics 365 and the Power Platform: discounted CRM and app-building licences. See Microsoft’s offers for nonprofits.
Frequently asked questions
Is Microsoft 365 free for charities in the UK?
Microsoft 365 Business Basic is free for eligible charities for up to 300 users. It includes email, Teams, 1TB of OneDrive and the web and mobile Office apps. The plans with desktop apps and advanced security are discounted rather than free.
How much is Microsoft 365 Business Premium for charities?
£4.20 per user per month in the UK, on an annual subscription and excluding VAT. Businesses pay £16.90.
Can charities still get 10 free Business Premium licences?
No. Microsoft discontinued the Business Premium grant for renewals from 1 July 2025. Existing grant licences expire at the next renewal, after which Premium is available at the discounted price.
Who is eligible for Microsoft’s nonprofit offers in the UK?
Organisations with recognised charitable status, typically registered with the Charity Commission, OSCR or the Charity Commission for Northern Ireland. Government bodies, schools and universities, most healthcare organisations, trade associations and political organisations are not eligible.
How long does Microsoft nonprofit verification take?
Microsoft says up to 3 days in its documentation and up to 7 business days in its FAQ. Making sure your details match the charity register exactly helps avoid delays.
Can volunteers use the free Microsoft 365 licences?
The free grant licences are for paid staff and unpaid executive leaders. Volunteers can use discounted licences, and enterprise customers can add F3 licences for volunteers.
