Skip to content
Archived content. You are viewing v1 of SME Digital Advisor — the original multi-section site (risks, scenarios, policies, OWASP, flashcards). Go to current site →

Scenarios

What to do when…

Step-by-step guides for situations every SME hits sooner or later.

Incident response

An employee just clicked a phishing email

Speed matters. The actions you take in the first hour decide whether this becomes a footnote or an incident.

Ransomware just hit. First 24 hours

Don't pay yet. Don't reboot. Don't restore over a still-infected system.

People

A staff member is leaving. Managing their access

Leavers are the most common source of orphaned accounts.

IT onboarding for a new joiner

A consistent process prevents 80% of access problems three years later.

Customers

A customer just sent us a security questionnaire

These are now routine. The first one is hard; the tenth is a copy-paste.

Buying decisions

Choosing a new IT supplier (MSP)

This decision affects your security posture more than any tool.

Choosing cyber insurance

Cyber insurance has matured. The cover is more useful and the requirements stricter.

Standards

Approaching Cyber Essentials

Achievable in 4–8 weeks for most SMEs.

AI

Adopting AI safely in a small team

You don't need a moratorium. You need a four-step plan and a one-page policy.

M&A

Buying or being bought — the IT bit

The hidden costs in a deal are usually in IT and data.