How to Write Your One-Page Governance Sheet This Afternoon
Four headings, forty-five minutes, one sheet of paper. Here's exactly how to build it.
Read more →Practical Advice
23 articles
The Fix That Actually Exists: Closing the Open Book on OSINT Exposure
Five episodes. One argument. UK SMBs are exposed by public data policy, commercial reuse, and regulatory hesitation. Here is what to do about it.
Read more →
Five Episodes In. Here Is What You Can Actually Do About It.
The Open Book Problem is structural. Not every exposure matters equally. Not every fix costs money. The full cast is back for the finale.
Read more →
The Two-Hour Test: What to Check Before Paying for Data Removal
Before paying for a data removal subscription, two hours of free work tells you exactly whether it will solve your actual problem. Here is the full process.
Read more →
The Privacy Dashboard That Made You Feel Safe While Your Home Address Stayed Online
A removal service dashboard showing successful removals can mask the fact that your most important exposures were never in scope. Here is how to spot the gap.
Read more →
What DeleteMe and Incogni Actually Cover for UK Users in 2026
Deloitte audited Incogni in August 2025. DeleteMe covers up to 262 brokers depending on plan. Neither can fix Companies House or electoral register exposure.
Read more →
DeleteMe and Incogni: Are Data Removal Services Worth It for UK Users?
DeleteMe and Incogni are not scams. But UK users pay monthly for rights they own free, against a broker list built for the wrong country.
Read more →
You Are Paying Monthly to Exercise Rights You Already Own. That Is the Problem.
DeleteMe and Incogni are not scams. But paying monthly to exercise rights you own under UK GDPR for free is evidence the rights are broken.
Read more →
How to Submit a UK GDPR Erasure Request to a Data Broker That Actually Works
Most UK GDPR erasure requests to data brokers fail because they are vague, undocumented, or not followed up. Here is the process that produces results.
Read more →
How to Audit Your Own OSINT Exposure: A Step-by-Step Guide for UK Directors
A practical sequenced guide to audit and reduce your public data exposure as a UK SMB director. No tools required. No budget needed. One afternoon.
Read more →
Ten Questions to Ask Your IT Provider This Week
You do not need to understand SAML or KEV. You need to ask grown-up questions and expect plain-English answers. Here are ten of them.
Read more →
Set Up Security Logging for Your Small Business in 60 Minutes: A Step-by-Step Guide
Fifteen minutes for Microsoft 365. Fifteen for your firewall. Thirty for a weekly review process. Here is the practical logging guide your IT provider should have given you.
Read more →
How To Roll Out TPM Plus PIN BitLocker On A Windows 11 Fleet
TPM plus PIN BitLocker is one Group Policy change, one command per device, and a Tuesday of user communication. The whole job fits in two weeks. Here is how.
Read more →
The Seven Questions to Ask Your IT Provider Before They Cost You a Breach
Seven questions. Ask them calmly, in writing, before your next contract renewal. A good provider will welcome them. A bad one will hand-wave. That is the test.
Read more →
Patch Tuesday May 2026: The Four Bugs UK SMBs Must Fix This Week
137 patches. 30 critical. No zero-days. The four bugs UK SMBs must fix this week, plus the perfect-10 one that needs no action at all.
Read more →
The Anatomy of a £35-Per-User MSP Quote: A Forensic Look at What Has Been Removed
Strip out Microsoft licensing. If your provider is below £50 per user per month outside London or £75 inside it, something has been removed. The maths does not lie.
Read more →
Five Things You Can Do This Week to Beat the UK Cyber Security Survey Average: No Budget Required
53% of UK businesses have no MFA. 56% have no continuity plan. Five steps to beat the average this week. No budget. No consultants. No excuses.
Read more →
Cyber Essentials Before Summer: The Step-by-Step Guide to Getting Certified Before the Pledge Arrives
The Pledge launches this summer. Certification takes four to six weeks. Here is the exact process, with costs, timelines, and the steps your IT provider should handle.
Read more →
The Five Step DNS Troubleshooting Guide Your Small Business Actually Needs
Website not loading? Before you blame DNS, follow these five steps. A practical guide that saves hours of wasted time.
Read more →
Six Controls That Stand Between You and a Denied Cyber Claim
UK insurers check six specific technical controls after a breach. If they're not in place and documented, your claim is at risk. Here's the practical checklist for UK SMBs.
Read more →
The Tech Fridge Audit: How to Do It in 30 Minutes Without Breaking Anything
A 30-minute walkthrough any small business owner can do without specialist knowledge. By the end, you'll have a clear list of what's safe, risky, and what needs to go.
Read more →
The Overconfidence Tax: Why UK Businesses Keep Paying to Get Breached
58% of UK business leaders rank cyber breaches as their top risk for 2026. Three quarters doubt their ability to respond when one happens. The gap between those two facts is what's costing UK SMBs an average of £195,000 per incident — and it's not a knowledge problem.
Read more →
The 5-Step IoT Device Audit: Find and Secure Every Forgotten Computer on Your Network
Practical Value: After Monday's podcast about the marketing agency breach through an unsecured printer, the most common question we've received is: "How do I actually do this audit myself?" Fair question. Telling business owners they have a problem is easy. Providing practical steps to fix it is harder. This guide walks you through conducting a comprehensive IoT device audit using free tools. Time investment: 4-6 hours for initial audit. Cost: Free to £200 for network scanning tools. Difficulty:
Read more →