Russia, state-backed hackers and UK small businesses

    A small business can be caught up through a supplier, shared software or a compromised service, so start with the basic controls used against ordinary cybercrime. We help small UK firms put those controls and recovery plans in place, with account hardening from £2.50 per user monthly, plus VAT.

    Security analysis at a computer workstation

    What the NCSC says

    The NCSC Annual Review 2026 describes Russia as the UK's most audacious cyber threat at the time of the review. Read NCSC Annual Review 2026.

    The NCSC Annual Review 2026 says AI and automation are already helping some threat actors find vulnerabilities and target victims. Read NCSC Annual Review 2026.

    The NCSC's January 2026 warning describes Russian-aligned hacktivists disrupting UK organisations, while distinguishing them from groups under direct state control. Read NCSC's 19 January 2026 warning.

    These are attributed security assessments, not a judgement about any country's people. Do not treat state-backed operations, state-aligned activism and every criminal attack as interchangeable.

    How a small business gets caught up

    The NCSC Annual Review 2026 describes disruption spreading from the Jaguar Land Rover incident to its suppliers and wider business activity. Read NCSC Annual Review 2026.

    Hypothetical dependencyPossible business impactPreparation
    Supplier to a larger targetOrders or payments are interruptedAlternative contacts and a cash-flow decision process
    Compromised software or service providerAccess must be restricted while it is checkedAn inventory, updates and an independent recovery route
    Ransomware affecting local systemsFiles and applications cannot be usedContainment instructions and tested recovery copies

    What actually reduces the risk

    MeasureOur serviceFrom per month, plus VAT
    Multi-factor sign-in and secure settingsAccount hardening£2.50 per user
    Account-activity monitoring24x7 breach monitoring£4 per user
    Software updatesManaged patching£2.50 per device
    Staff preparationTraining and phishing tests£3.50 per user
    Independent recoveryMicrosoft 365 backup£2.50 per user, included in support agreements
    Baseline controlsCyber Essentials preparationFrom £95 monthly; scope confirmed in writing

    What not to worry about

    We do not recommend buying specialist nation-state defences just because of a news headline. Start with your records, customers, suppliers and contractual requirements. A business with particularly sensitive responsibilities may need specialist advice, but that should follow an assessment.

    The UK Government Cyber Security Breaches Survey 2025/2026 identifies phishing as the most prevalent breach or attack type reported by businesses. Read UK Government Cyber Security Breaches Survey 2025/2026.

    The NCSC's small business guide covers backups, protection of devices and accounts, and recognising scams. Read NCSC small business guide.

    What we can do for you

    We help you agree priorities, document workarounds and check the recovery arrangements. Continuity planning is quoted as a fixed fee after a free 30 minute call. The technical fallbacks use our standard prices.

    Technical fallbackFrom per month, plus VAT
    Independent Microsoft 365 backup£2.50 per user, included as standard in support agreements
    Email filtering£1.50 per user, not needed as an additional filter with Microsoft 365 Premium
    Server backup with cloud failover£35 per server
    Desktop and laptop backup£10 per device
    Business phone system£11 per user

    Monthly starting prices exclude VAT and use a 3 year term billed monthly. Shorter terms cost a little more. Your price and the actual fallback arrangements are confirmed in a written quote.

    Questions about this service

    Does a backup keep every service running?

    No. Backup provides a recovery copy. Alternative access, replacement equipment, staff instructions and decisions are separate parts of a continuity plan.

    Will you guarantee a recovery time?

    We agree targets after reviewing the systems, dependencies and test results. A planning target or example is not a contractual recovery guarantee.

    Is security monitoring an out-of-hours helpdesk?

    No. Our security partner's analysts provide the contracted 24x7 account monitoring. Normal support hours are Monday to Friday, 08:30 to 17:30, excluding UK bank holidays.

    Where should we start?

    Call 01494 866668 for a free 30 minute planning conversation. Describe the activity you could least afford to lose and the arrangements already in place.

    Continuity tools

    Use these planning aids to prepare a conversation. Do not put passwords or confidential records in a worksheet.

    Related information

    Talk to us about your business

    Call 01494 866668

    Prefer us to contact you? Request a call back.