The logs a UK SME needs to investigate a cyber incident: identity, Microsoft 365 audit, endpoint, firewall and more, plus how long to keep them.

How to test your disaster recovery plan: RTO and RPO explained, the three levels of testing, a DR test checklist, and how often to test.

How to run a cyber incident tabletop exercise at a UK SME: who to involve, how to plan and facilitate it, using injects, and capturing the lessons.

Your Microsoft 365 account has been hacked? A step-by-step guide: contain it, revoke sessions, investigate mailbox rules and forwarding, and lock the attacker out.

A calm, ordered ransomware response checklist for UK SMEs: isolate, protect backups, report, and recover safely without paying or reinfecting your systems.

Data breach or cyber incident? Understand event, alert, incident, breach and personal data breach, and exactly when you must report to the ICO.

A practical, UK-focused guide to responding to a cyber incident: what to do in the first 15 minutes, hour, day and 72 hours, six playbooks, safe recovery, and a free editable toolkit.

RTO vs RPO explained in plain English for UK SMEs: what each objective means, why a nightly backup does not prove your RPO, and how to set realistic, tested recovery targets.