lead

Cyber security · Surrey, Hampshire and Berkshire

Cyber security services built around your business

INDIGO IT provides managed cyber security for small businesses across Surrey, Hampshire and Berkshire from our office in Camberley. We protect accounts, devices, email and data with multi-factor authentication, endpoint protection, email filtering, protected backups and monitoring, and we prepare businesses for Cyber Essentials. We hold Cyber Essentials Plus ourselves, and security is part of your fixed monthly cost per user rather than a separate contract.

Cyber Essentials on screen in the INDIGO IT office
20+20+ years supporting local businesses
Cyber Essentials Plus certified
1One fixed monthly cost per user
Based in Camberley

Why small businesses are targeted

Cyber security for small businesses

A compromised password, a convincing payment request or an outdated device can expose a business of any size. The consequences depend on the information and systems affected, as well as how prepared you are to respond.

Cyber security for small business starts with understanding those risks. We assess the controls you have, identify weaknesses and prioritise improvements around the way your team works.

That gives you a clearer view of what protects your business and where further attention is needed.

Defence in depth

Defence in depth: six layers that work together

Effective protection uses several controls together. Our cyber security consultancy identifies the priorities, while managed security services keep those controls maintained and monitored.

Defence in depth: the six critical layers explained

Layer 1

Identity and access

Multi-factor authentication adds a check beyond a password. Appropriate permissions and separate administrative access help limit what a compromised account can reach.

Layer 2

Devices

Supported software, security updates, encryption and endpoint protection help reduce the risks associated with laptops, desktops and mobile devices.

Layer 3

Email

Filtering helps detect suspicious links, attachments and impersonation attempts. It works alongside staff awareness and clear processes for checking sensitive requests.

Layer 4

Backups

Backups need protection from incidents affecting your live environment. Recovery testing checks that the required data can be restored and helps inform your recovery plan.

Layer 5

Monitoring

We investigate warning signs such as unusual sign-ins, unexpected file activity or devices that stop reporting. Monitoring supports detection and response; it cannot guarantee every incident will be prevented.

Layer 6

People

Security awareness training helps people recognise suspicious requests and know how to report them. Phishing exercises give your business a practical way to identify where more guidance is needed.

Cyber Essentials

Cyber Essentials and Cyber Essentials Plus

Cyber Essentials is a UK government-backed certification covering five technical control areas. It provides a structured starting point for addressing common threats and may be requested by clients, contracts or insurers.

We help you prepare for assessment and maintain the controls afterwards. INDIGO IT holds Cyber Essentials Plus, which adds independent technical testing to the assessment process.

Get help with Cyber Essentials

What we run for you

The cyber security services we provide

Our cyber security services sit alongside your wider IT, connecting protection with the way your business operates. You'll know who's looking after each part of your security and what's included in your fixed monthly cost per user.

Endpoint protection

Centrally managed security for the devices we look after.

Email security

Controls that help detect phishing, spoofing and impersonation in Microsoft 365.

Identity and access management

Multi-factor authentication, conditional access and permissions appropriate to each role.

Monitoring and response

We investigate security alerts and act on the findings.

Vulnerability assessment

A review of exposed, outdated or misconfigured systems to prioritise remediation.

Backup and disaster recovery

Protected backups, recovery testing and documented recovery priorities.

Backup and disaster recovery

Security awareness training

Practical guidance and exercises to help your team recognise and report threats.

Cyber Essentials and compliance support

Preparation, remediation and assistance through assessment and renewal.

Client feedback

What clients say

★★★★★
“Indigo have really helped me understand what the problem is, what we need to do about it, and put a plan in place. I would recommend Indigo to anybody.”

Roger Wingrove · Managing Director, Newmont Engineering

Read more client feedback

Matt Elson, Managing Director of INDIGO IT

Making great IT personal and accessible

Meet Matt, Managing Director of INDIGO IT

Matt is passionate about technology and helping businesses to thrive with it. If your tech is in a tangle, he'd love to help you. Whether it's tricky tech, cyber security, or transforming your business's IT to achieve your goals, Matt can offer clear guidance, free from the technobabble.

Ready to make headway to exceptional IT? It all starts with an informal conversation!

Schedule your meeting Speak to us

Frequently asked questions

Cyber security questions we get asked most

Straight answers about protecting a small business. If yours isn't here, call us on 01491 693424.

Yes. Small businesses hold valuable information and depend on accounts and systems that need protection. We assess your existing controls and prioritise improvements around the risks to your business.

Monitoring uses information from supported devices and services to identify warning signs, such as unexpected sign-ins or suspicious file activity. We investigate those alerts and take action to address the findings.

It can help you address technical requirements in an insurer's questionnaire, including access controls, device protection and backups. Requirements vary, so we work from the questions and evidence your insurer actually requests.

Cyber insurance renewals are getting tougher

No. INDIGO IT holds Cyber Essentials Plus, which is independently tested each year. We help businesses work towards ISO 27001, SOC 2 and the NIST framework when a client or contract requires it, but we do not hold those certifications ourselves.

We start by checking your systems, access and priorities, then tackle the most significant gaps first. You'll have a clear plan for the work and know when changes will happen.

Our ongoing security work is part of our managed IT service, and we also offer focused assessments. If you have an internal team or a specific concern, tell us what you need and we'll recommend the right approach.

Microsoft 365 includes security capabilities, but protection depends on configuration, licensing and ongoing management. We review access, administrative roles and recovery arrangements alongside the settings covered in our checklist.

The Microsoft 365 backup myth

INDIGO IT provides cyber security services to businesses in Camberley, Guildford, Woking, Farnham, Farnborough, Fleet, Aldershot, Basingstoke, Reading and Bracknell, with remote monitoring from our Camberley office and on-site work where it is needed.

Yes. Security awareness training is part of INDIGO IT's cyber security service: short online courses for your staff and occasional practice phishing emails that show where more practice would help. Email protection runs alongside it: filtering that checks every incoming message for spam, scams and dangerous attachments, warning banners on suspicious email, and SPF, DKIM and DMARC records for your domain so that fakes sent in your name can be blocked. We provide this to businesses across Surrey, Hampshire and Berkshire from Camberley.

INDIGO IT is the trading name of INDIGO I.T. LTD, founded in 2002 and registered in England and Wales, company number 04404474. Call 01491 693424 or email info@indigo-it.com.