Resources hub

Practical cyber security guides for SMEs.

Expert guides, practical checklists, insight reports and videos to help small and medium businesses reduce risk, achieve compliance and stay protected.

Expert insightsfrom UK specialists
Practical, easyto follow advice
Designed forSMEs (5–25 staff)

Browse the Full Library

Free access
No credit card
Practical, business-focused content

Free starter pack builderInstant access

What do you most want to sort out?

Pick one or more. We’ll build your pack from our free guides.

Your pack0 guides

Pick a priority above and your pack builds here.
GuideCyber Essentials: A Practical Guide
Practical guidePhishing and Email Fraud
Practical guideRansomware Readiness
Practical guideSecure Hybrid Working
Expert insightUK Threat Landscape 2026
Expert insightLessons from the 2025 UK Attacks
Expert insightAI, Deepfakes and Fraud
GuideUK Cyber Regulation 2026
GuideChoosing a Security Partner

Your library is already unlocked on this device.Open your guides

Instant accessafter a quick email check
No credit cardand no obligation
Written byUK security specialists

What do you need help with?

Quickly find the right resources for your biggest security challenges.

View all categories

Featured

Cyber Essentials: A Practical Guide

What Cyber Essentials covers, what it asks of your team, and how to pass first time.

Written by UK cyber security specialists
Practical, plain-English steps
Instant access after one short form

Cyber Essentials: A Practical Guide cover

Preview inside

Guide
Step-by-step guidance
No obligation
Made for SMEs

Ask Our AI Agent

Get instant answers to your cyber security questions and find the most relevant guides, templates and resources for your business.

Free access

Unlock our full Resource Hub

Instant access to every guide, report and video. One short form, no credit card.

Browse guides by category

View all guides

Email Security Best Practices
Reduce phishing, spoofing and email compromise.
14 resources
Microsoft 365 Security Guide
Practical steps to secure your Microsoft 365 environment.
2 resources
Data Protection & GDPR Compliance
Understand your obligations and protect customer and business data.
9 resources
Security Awareness Training Guide
Build a security-first culture with practical training tips.
5 resources
Incident Response Quick Guide
Step-by-step actions to take when a security incident occurs.
6 resources
MDR Buyer’s Guide for SMEs
How to choose the right Managed Detection & Response solution.
6 resources
Productivity, AI & Data Protection
Measure productivity, govern AI use and stop sensitive data leaving the business.
9 resources

51 resources

Guide
Sample Security Risk Report
See exactly what your free report covers: risk score, email spoofing checks, exposed services, leaked logins and a ranked action plan.
Guide
Sample Monthly Security Report
What managed clients receive every month: security score, key findings, threats blocked, patching and MFA status, and recommended actions.
Guide
Cyber Essentials: A Practical Guide
What Cyber Essentials covers, what it asks of your team, and how to pass first time.
Guide
Cyber Essentials Funding 2026: How to Claim Your Share
What the government's new £9.4m package covers, who qualifies, and how to apply and pass first time.
Practical guide
Phishing and Email Fraud
Practical steps to stop phishing, invoice fraud and email impersonation.
Practical guide
Ransomware Readiness
Prepare, protect and recover: a step-by-step ransomware readiness plan.
Practical guide
Secure Hybrid Working
Keep people, devices and data secure wherever your team works.
Expert insight
UK Threat Landscape 2026
The threats most likely to hit UK SMEs this year, and what to prioritise first.
Expert insight
Lessons from the 2025 UK Attacks
What the major UK cyber attacks of 2025 teach smaller businesses about resilience.
Expert insight
AI, Deepfakes and Fraud
How criminals use AI voice and video to impersonate leaders and suppliers, and how to stop it.
Guide
UK Cyber Regulation 2026
The rules and expectations affecting UK businesses in 2026, explained in plain English.
Guide
Choosing a Security Partner
The questions to ask, and the red flags to avoid, when choosing a cyber security provider.
Checklist
Cyber Essentials Readiness Checklist
Check all five Cyber Essentials controls before you apply, so you pass first time.
Checklist
Microsoft 365 Security Checklist
The settings that stop most Microsoft 365 account takeovers: MFA, admin roles, sharing and alerts.
Checklist
Backup & Recovery Test Checklist
Prove your backups actually restore, with a step-by-step test and a results log.
Checklist
New Starter & Leaver IT Checklist
Give new staff the right access on day one and remove it completely when they leave.
Checklist
Payment & Bank Detail Change Checklist
A call-back process that stops invoice and bank-detail fraud before money leaves.
Checklist
Legal: Conveyancing Fraud Checklist
Protect completion monies and client accounts from Friday-afternoon fraud.
Checklist
Finance: Client Money & Payment Fraud Checklist
Controls that protect client money, payment approvals and FCA expectations.
Checklist
Healthcare: DSPT Evidence Checklist
Gather the evidence you need for your Data Security and Protection Toolkit submission.
Checklist
Recruitment: Candidate Data Checklist
Keep CVs, ID documents and payroll data secure and GDPR compliant.
Checklist
Accounting: HMRC Scam & Client Data Checklist
Stop HMRC-themed phishing and protect client records during tax season.
Checklist
SME: First 10 Security Basics
The ten controls every small business should have in place first.
Checklist
7 Security Checks for Recruitment Agencies
Score your agency on MFA, safe CV handling, candidate ID checks and four more controls, with a fix for every gap.
Checklist
7 Security Checks for Accountancy Practices
Score your practice on MFA, agent access, payment verification and four more controls, with a fix for every gap.
Checklist
5 Client Security Questions Every Accountancy Firm Should Answer
The questions clients, insurers and auditors are asking, the answers they expect, and the evidence to have ready.
Checklist
5 Microsoft 365 Security Checks for SMEs
Five checks that close the most common Microsoft 365 gaps, plus quick wins you can do this week.
Visual guide
How to Spot a Malicious CV or Candidate Email
An annotated field guide for recruiters: what a weaponised application looks like, and what to do before you click.
Visual guide
HMRC Impersonation: What Accountancy Teams Should Check
Fake HMRC emails, texts and calls, annotated, and the checks your team should make every time.
Checklist
If Your Recruitment Agency Lost Access to IT Tomorrow
A continuity checklist for keeping candidates working, clients served and contractors paid when systems go dark.
Visual guide
AI Phishing: Realistic Examples and Warning Signs
One page for your team: what AI phishing looks like, six warning signs that still work, and what to do.
Template
Information Security Policy Template
An editable, plain-English security policy you can adapt and adopt today.
Template
Acceptable Use Policy Template
Set clear rules for devices, email, internet and AI tools across your team.
Template
Incident Response Plan Template
Who does what, and when, in the first hours of a cyber incident.
Template
Supplier Security Questionnaire
Assess the security of suppliers who handle your data or connect to your systems.
Video · 1:12
Passwords & Authentication
Module 1: strong passwords, password managers and MFA, your first line of defence.
Video · 1:12
Spotting Phishing Emails
Module 2: how phishing emails trick staff, and the warning signs to check before you click.
Video · 1:14
Ransomware & Malware
Module 3: how malware gets in, what ransomware does, and how to recognise and prevent it.
Video · 0:52
Remote Working & Device Security
Module 4: keeping laptops, phones and home Wi-Fi secure wherever your team works.
Video · 1:10
Social Engineering
Module 5: how attackers manipulate people rather than systems, and how to outsmart them.
Productivity & data guide
Measuring the Real Impact of AI at Work
Licences are easy to count; value and risk aren’t. A practical framework for proving what AI is doing for your business, safely.
Productivity & data guide
Employee Productivity in a Hybrid World
How to see where work really happens and remove what gets in the way, without turning trust into surveillance.
Productivity & data guide
Productivity Monitoring Done Right
Use workplace analytics fairly, lawfully and securely, so the data helps your people rather than policing them.
Productivity & data guide
What Is Employee Monitoring?
A plain-English guide for UK employers: what it covers, what the law allows and how it fits your security strategy.
Productivity & data guide
Governing AI Agents in Your Business
AI agents take actions, not just answer questions. How to give them the access they need without handing over the keys.
Productivity & data guide
Data Loss Prevention for UK Organisations
Data walks out through email, cloud apps, USB drives and AI tools. How to keep it where it belongs.
Video
ActivTrak Product Tour
See how ActivTrak shows where your team’s time goes, so you can remove blockers and balance workloads.
Video
Teramind: AI Usage Monitoring
See which AI tools staff use and what data goes into them, with Teramind insider risk and DLP.
Video
Teramind Overview Demo
A walk-through of Teramind: user activity insights, data loss prevention and insider risk alerts in one dashboard.
Video
Sendmarc DMARC Overview
How Sendmarc stops criminals sending email that pretends to come from your domain.
Video · 0:45
Tutela Attack Surface Demo
What attackers can see about your business online, and how Tutela finds and prioritises the gaps.