If security matters to you, it's usually worth it. Business Premium adds device management (Intune), Conditional Access, Defender for Business and data protection features on top of Business Standard. It's available for organisations of up to 300 users.
Microsoft Intune โMicrosoft keeps the service running and has short-term recovery options, but it recommends you back up your own content. Deleted items and versions are only kept for limited periods, so a separate Microsoft 365 backup protects against deletion, ransomware and account problems.
Is OneDrive a backup? โMicrosoft Defender Antivirus is a solid baseline. Businesses get much better protection from Defender for Business, included in Business Premium, or a managed endpoint security product, which adds threat detection and response, central reporting and someone actually watching the alerts.
Cybersecurity โMicrosoft ended standard support for Windows 10 on 14 October 2025, so it no longer gets free security updates. Paid Extended Security Updates are available for a limited time, but the safer plan is to upgrade or replace devices that can't run Windows 11.
Typically every three to five years. Replace sooner if a laptop can't run a supported version of Windows or macOS, is slowing people down, or is out of warranty for a critical role. Planning replacements avoids a costly batch all failing at once.
New laptop setup checklist โThe UK's old copper phone network finishes switching off by 31 January 2027. Business lines still on it need moving to a digital service, and anything else using them, such as alarms, card machines, fax and lift phones, needs checking. Numbers can usually be kept.
Business landline switch-off โMost small businesses don't. Files, email and many business apps now work better in Microsoft 365 or Google Workspace, with no hardware to maintain. Some specialist software or large files still suit a local server, so it's worth checking before you switch it off.
Cloud & Microsoft 365 migration โYour business, registered in its name with login details you control. Domains registered to a former employee, web designer or IT provider are a common cause of lost email and websites. Check who the registered owner is and that the renewal details are current.
1. Phishing emails that steal Microsoft 365 or Google logins. 2. Email account takeover and invoice fraud, where criminals read a hacked mailbox and change bank details. 3. Impersonation of a director or supplier by email, text or phone, sometimes with AI voice cloning. 4. Ransomware. 5. Weak or reused passwords, missing MFA and unpatched devices that let attackers in.
Cybersecurity tools for small businesses โCommon signs: customers or suppliers asking about odd emails or invoices you didn't send, emails missing from your inbox, unfamiliar forwarding or inbox rules, and sign-ins from unexpected locations. Change the password, sign out all sessions, check the rules and sign-in logs, and make sure MFA is on.
Free security review โCall your bank immediately, as recovering money is time-sensitive, then report it as fraud to the police. Secure the email account involved, check for forwarding rules, and warn the real supplier and your customers. Then agree that any change to bank details is always confirmed by phone on a known number.
Cybersecurity โYes. Multi-factor authentication blocks most attacks that rely on stolen passwords, and it's a requirement for Cyber Essentials and many cyber insurance policies. Use an authenticator app rather than text messages where possible.
Cybersecurity โYou need it for some UK government contracts, and many clients, supply chains and insurers ask for it. Even when it isn't required, its five controls are a good security baseline for any small business.
Do I need Cyber Essentials? โ