Guides
Plain-English answers on cyber security and data protection.
Straight answers to the questions UK small businesses ask most, checked against official sources and kept up to date.
Cyber Essentials and data protection
How much does Cyber Essentials cost in 2026?The official Cyber Essentials fees for 2026 by business size, what's included, and the hidden costs of getting ready.Read the guideDoes my business need Cyber Essentials?Who has to have Cyber Essentials, which contracts ask for it, and whether it's worth it if nobody's asking yet.Read the guideDo I need to pay the ICO data protection fee?Who has to pay the ICO data protection fee, how much it costs in 2026, the exemptions, and what happens if you don't pay.Read the guideCyber Essentials changes from April 2026: what small businesses need to knowWhat changed in Cyber Essentials on 27 April 2026 with requirements v3.3 and the Danzell question set, and how to get ready.Read the guideThe new data protection complaints rules: what small businesses must doSince 19 June 2026, every UK business must let people complain about how it uses their data, acknowledge complaints within 30 days and keep records.Read the guideHow to turn on two-step verification in Microsoft 365 and Google WorkspaceStep-by-step instructions to switch on two-step verification (MFA) for every user, now an automatic fail for Cyber Essentials if it's missing.Read the guideWindows 10 and Windows 11 24H2: which versions are still supported?Which versions of Windows still get security updates in October 2026, what that means for Cyber Essentials, and what to do about older computers.Read the guideCommon scams targeting UK small businesses, and how to spot themThe scams small businesses see most, from fake invoices to sign-in code fraud, with the warning signs and what to do if you're caught out.Read the guide
Guides for your industry
Cyber Essentials and data protection for small charitiesWhat small charities need for Cyber Essentials and UK GDPR: volunteers' accounts, donor data, Gift Aid records and reporting serious incidents.Read the guideDoes my dental practice or clinic need Cyber Essentials?Cyber Essentials, the NHS Data Security and Protection Toolkit and UK GDPR for dental practices, physios, opticians and private clinics.Read the guideCyber security and data protection for letting and estate agentsHow letting and estate agents can stop deposit fraud, store right to rent and AML records properly, and get ready for Cyber Essentials.Read the guideWhy cleaning contracts ask for Cyber EssentialsWhy facilities managers and public sector buyers ask cleaning contractors for Cyber Essentials, and how a small cleaning business can get ready.Read the guideData protection for recruitment agencies: CVs, ID and DBS checksHow recruitment agencies should handle CVs, ID documents and DBS certificates under UK GDPR, and answer client security questionnaires.Read the guideCyber security for accountancy and bookkeeping practicesHow small accountancy and bookkeeping practices can protect client data, stop bank detail fraud and get ready for Cyber Essentials.Read the guide