Microsoft 365 secured, migrated and supported, properly

1 · Email security

Stop fake emails reaching your team, and stop criminals sending as you

What we do

• Lock your domain against spoofing: SPF, DKIM and DMARC taken to full protection without breaking genuine mail
• Anti-phishing and impersonation protection for directors and finance staff
• Links and attachments checked before anyone clicks them
• Review of forwarding rules, shared mailboxes and who can read whose mail
• Optional monthly monitoring, with an alert if something new starts sending as you

What you get

Before/after results from our email check, a settings report, and a domain that can't be used to fake your invoices.

2 · Sign-ins & access

Make sure only the right people get in, from the right places and devices

What we do

• Multi-factor sign-in for everyone, with phishing-resistant options for admins
• Block risky sign-ins: old email protocols, unexpected countries, unmanaged devices
• Separate, protected admin accounts, with no day-to-day use of admin rights
• Guest and external sharing review: who outside your business still has access?
• A joiner and leaver checklist, so ex-staff are locked out on their last day

What you get

A red/amber/green report on MFA gaps, risky sign-ins, stale guests and admin exposure, plus a fix plan.

3 · Devices & threat protection

Know when something's wrong, and stop it spreading

What we do

• Defender running and reporting on every laptop, PC and phone
• Security baselines and automatic updates managed centrally
• Ransomware protections switched on (attack surface reduction, tamper protection)
• Alerts set up so the right person hears about real problems, not noise
• Your Microsoft Secure Score improved, with before/after evidence for insurers and Cyber Essentials

What you get

Every device protected and visible in one place, a Secure Score before/after, and a one-page summary of what's now switched on.

4 · Data protection & compliance

Know where your sensitive data lives, who can see it, and stop it leaving the business

Data discovery & mapping

Find where personal and sensitive data sits across email, SharePoint, OneDrive and Teams: NI numbers, bank details, HR and health records. You get a data map you can use for your GDPR records.

Sensitivity labels

A simple scheme (Public, Internal, Confidential, Highly Confidential) that can encrypt files and stays with them, even when they're emailed outside.

Data loss prevention

Warn or block when someone tries to send card numbers, payroll or client data to the wrong place.

Retention

Keep what you legally must, for as long as you must, and stop hoarding what you shouldn't.

DSAR & HR email searches

Subject access requests, grievances and legal holds, with a search log that supports a "reasonable and proportionate" search under the Data (Use and Access) Act 2025. Works directly with your solicitor or HR adviser.

Copilot readiness

Copilot can find anything a user has access to. We fix oversharing in SharePoint, Teams and OneDrive and set up AI controls before you roll it out.

What you get

A data map and "top 10 risks" summary, labels and policies tested in warning mode before they're enforced, and a one-page staff guide so people know what to do.

5 · Migrations

Move your email and files to Microsoft 365, from the cloud or your own servers, without losing a thing

What we do

• Email moves to Microsoft 365 from GoDaddy, Google, IMAP hosts and other providers
• On-premises Exchange servers moved to Exchange Online using a cutover, staged or hybrid migration, whichever suits your version and size
• Google Workspace to Microsoft 365, and back: mail, calendars, contacts and Drive files, with Gmail labels and sharing translated properly
• Tenant-to-tenant moves for mergers, acquisitions, rebrands and splits, including mailboxes, OneDrive, SharePoint and Teams
• File servers, NAS drives, Google Drive and Dropbox moved to SharePoint, Teams and OneDrive, with a cleaned-up folder structure and existing permissions mapped to least-privilege SharePoint groups
• Domain and DNS cutover planned around your business, with mail flowing on both sides until everything has moved
• Security switched on in the new tenant from day one, not as an afterthought

What you get

A readiness report before anything moves, a fixed per-user price, item-count and checksum checks after, and a signed-off migration report.

6 · Microsoft 365 support

Someone who knows Microsoft 365 properly, when you need them

What we do

• New Microsoft 365 set-up for new businesses: domain, mailboxes, MFA, shared mailboxes, Teams and a security baseline
• Joiners, leavers and licence changes, done properly and documented
• Outlook, Teams, OneDrive and SharePoint problems: sync issues, permissions, calendars, shared mailboxes and distribution lists
• Teams and SharePoint structure: sites, channels and permissions that make sense to your staff
• MFA resets, lost phones and locked accounts
• Monthly plans with a security check and email monitoring included, or ad-hoc help with no contract

What you get

Help from a Microsoft 365 specialist, not a script-reader, with everything changed written down so the next person can follow it.