An AI usage policy for a small company (with a template)
Your team is already using ChatGPT, Copilot or Gemini. Banning it rarely works. The risks in plain terms, a green-amber-red rule for data, and a one-page policy template you can adapt.
Tag
cybersecurity
Most attacks on small and growing businesses do not start with clever hacking. They start with an e-mail that looks real, a password used twice, or a setting nobody turned on. These guides explain how the common attacks work and what to change this week, in plain language and without buying new tools first.
You will find checklists for spotting phishing and fake invoice e-mails, the Microsoft 365 security settings most small companies leave off, how to work from home safely, and a template policy for using AI tools at work. Each one is written for owners and IT leads who need to act, not for security specialists.
When you need more than a checklist, our cybersecurity services can help: vulnerability assessment and penetration testing to find the gaps, managed detection and response to watch for attacks around the clock, incident response when something has already happened, and a CISO on demand to own the programme.
The fake invoice e-mail: how it works and 5 checks before you pay
A supplier e-mails to say their bank details have changed. It looks routine, and it is the most expensive kind of cybercrime aimed at businesses. How it works, and five checks before you pay.
10 Microsoft 365 security settings most small businesses never turn on
Microsoft 365 has strong security controls, but many of the most useful ones are off until someone turns them on. Ten settings we check first in every review, each one minutes to set.
E-mail phishing attacks: how they work and how to stay safe
Phishing is still the most common way attackers get in, and AI now writes the e-mails. How it works today, a real case from our work, and what actually protects you.