The leaver checklist that takes eleven minutes
Disable, convert the mailbox, move the files, collect the kit, log the date.
Gyms, memberships and the health questionnaire nobody deletes
Recurring payments and medical notes, held together, kept for years.
Why “change your password every 90 days” was always wrong
It produced Summer2024! and nothing else. What to do instead.
Funeral directors and the dignity of data
Long retention, sensitive family records, and payments taken at the worst moment of someone's life.
The scam that starts with a real conversation
Attackers read a genuine email thread for weeks before they say anything.
Tax deadline phishing: what HMRC never does
No links to sign in, no payment demands by text, no threats of arrest.
Landlords, letting agents and shared property portals
Tenant data spread across three systems and two WhatsApp groups.
Two-factor codes by text: better than nothing, worse than an app
SIM swaps are rare but real. Move email and banking to an app or a passkey.
Our first year: what we got wrong
Too many findings, too much jargon, and a score nobody could explain.
Solicitors: the client account and the four-eyes rule
Dual approval on new payees is the single control that survives a bad Friday.
Photographers and the backup that quietly stopped in March
Client galleries, model releases and 400GB in exactly one place.
Charities, funders and the security section of a grant form
Pre-answered questions, evidenced, so a volunteer isn't guessing at midnight.
Taxi and delivery drivers: your phone is your business
One device holds your income, your customers and your bank. Three settings to fix.
Multi-factor fatigue: why one unexpected prompt matters
If your phone buzzes and you didn't ask it to, your password is already known.
Vets, practice systems and out-of-hours access
Locums, shared logins and clinical records at 3am.
Free tools we actually recommend
Eleven things that cost nothing and close most of what we find.
Construction: the drawings folder shared with 'anyone with the link'
Forty-seven external opens from four countries, and nobody knew.
Why our score is out of 100 and not a traffic light
A colour tells you how to feel. A number tells you whether last month's work helped.
Card machines, phone payments and the questionnaire you don't want
Taking a card number over the phone multiplies your paperwork twelvefold.
The password manager conversation with a reluctant team
Nobody wants one until the day someone leaves knowing the reception password.