Email security
Email is where most attacks start. We filter phishing, malicious attachments and impersonation attempts before they reach your inbox, and set up SPF, DKIM and DMARC so criminals can't easily send email pretending to be you.
Cyber security that fits a small organisation
Most attacks on small businesses and charities aren't sophisticated. They're phishing emails, stolen passwords and devices that haven't been updated. We put practical protection in place against the threats you're most likely to face, then keep it working.
What we put in place
Layered protection, so one mistake or missed email doesn't become a breach.
Endpoint protection
Centrally managed protection on every laptop, desktop and server, watching for malware and suspicious behaviour, with alerts coming to us rather than relying on staff to notice.
Updates and patching
Operating systems and applications kept up to date on a regular schedule, so known vulnerabilities are fixed before they can be exploited. You can see what's been patched in your reports.
Accounts and access
Multi-factor authentication on every account, admin rights only where they're needed, and a proper process when staff and volunteers leave, so old accounts don't become a way in.
Backups
Microsoft 365 and server data backed up separately from the systems themselves, so a deleted folder, a failed disk or ransomware doesn't mean losing your work. We test that restores actually work.
Firewalls and networks
Business-grade firewalls and Wi-Fi, with guest and staff networks kept apart and secure remote access for people working from home.
Monitoring and alerting
Your systems are watched continuously, so we can spot and deal with problems early, often before you'd know anything was wrong.
Policies and guidance
Sensible, readable policies for passwords, devices and acceptable use, and practical guidance so your team knows what a phishing email looks like and what to do if they click one.
Know where you stand
Security you can't see is hard to trust. We give you regular, plain-English reporting on the state of your protection: devices covered, updates applied, threats blocked and anything that needs your attention.
It's useful for directors and trustees, and it's the evidence insurers, clients and funders increasingly ask for.
- Which devices are protected and up to date
- Threats blocked and incidents dealt with
- Accounts without multi-factor authentication
- Backup status and any failures
- Recommended next steps, in order of priority
Getting ready for Cyber Essentials
Cyber Essentials is the UK government-backed scheme that shows you have the basic protections in place. Clients, insurers and funders increasingly ask for it, and it's required for some public sector contracts.
We don't carry out the certification ourselves, but we can help you get there. If your self-assessment or a failed attempt shows gaps, we'll fix them, so you can go to certification confident your systems meet the standard.
Cyber Essentials covers five areas, and we can help with all of them:
- Firewalls protecting your internet connection and devices
- Secure configuration of computers, phones and cloud services
- User access control, including admin rights and multi-factor authentication
- Malware protection on every device
- Security updates applied within the required timeframe
Not sure where to start?
If you don't know how exposed you are, an IT risk assessment is the best first step. We review your systems and give you a prioritised plan, so you spend money where it makes the most difference.
Client data is critical to our business, and RaceLine IT has given us complete confidence in the security of our systems.
Find out how protected you really are
Tell us what you're worried about or what you'd like to improve. We'll give you honest advice, with no hard sell.
Get in touch
or call 01993 256044