The Cyber Made Simple home page, headed "Know what a bad day would cost your business", with a risk map listing the incidents most likely to hit a firm.

See it

Five plain questions give you a cost range for a bad day, built from the Government's Cyber Security Breaches Survey and from what the ICO has fined people. Nineteen more questions find the gaps behind that number and put them in order, worst first.

Fix it

Short jobs each week, sized for the time you have rather than for a project team. Ready-made policies and incident plans, staff training, and practice phishing emails. Every job shows what it takes off your risk.

Prove it

Being safe and being able to show it are two different jobs, and the second one is what wins or loses contracts. Everything you do leaves proof behind: a badge, a page you can share, a drafted answer to a customer's security questionnaire.

Who it is for

A firm with five staff and a firm with five thousand get the same scam email. Only one of them has somebody whose job it is to spot it.

Cyber security grew up serving big companies, and it still talks that way. Standards are written for people who read standards. Tools are sold per seat to buyers who have a budget line for them. Advice turns up as a forty page PDF that assumes somebody has time to read it.

The attacks moved down to smaller firms years ago. Scam email kits, stolen password lists and ready made ransomware do not check how big you are before they run.

Cyber Made Simple is built for the businesses on the wrong side of that gap. The ones least able to take the hit, and least helped to avoid it.

How it works

The service answers three questions, in the order a business actually asks them.

What would this cost me? Not a score out of a hundred, and not a red square on a dashboard, because you cannot act on either. A range in pounds, built from published UK figures, with the working always one tap away.

What do I do about it? The questions turn that number into a list of gaps in order, and each gap into steps you can finish in the time you have. Most take minutes. The plan still works when a busy month means you do none of them.

How do I show someone? Every finished job leaves proof behind. Customer security questionnaires get drafted from what you have already done. Customers and insurers get a link instead of a promise.

Free, Business and Business Plus

There is a free level that people and small teams keep for good. It covers the bad-day calculator, the risk questions, breach checks and the security assistant.

Business adds what a company needs rather than a person: tracking your Cyber Essentials readiness, planning what to do in an incident, and the policy templates.

Business Plus adds watching over time. Your team’s email addresses and your company domains checked for new breaches, a scan of what your business shows to the outside world, a phishing test for your staff, and drafted answers to customer security questionnaires.

Prices are on the Cyber Made Simple site rather than here, so there is only one place for them to be right.

A closer look

Cyber Made Simple in use

Being clear about it

What Cyber Made Simple is not

  • We do not put software on your computers, ask for admin access to your email, or connect to your systems.
  • Everything we do is advice, questions you answer yourself, documents we write for you, and checks against information that is already public.
  • That limit is on purpose. It means a break-in at our end can never become a break-in at yours.
Legal

The documents for Cyber Made Simple