Account, device and backup requirements
Describe whether the work concerns staff access, business devices, backup arrangements or awareness of suspicious messages. Identify the area requiring attention and any existing support arrangement relevant to it.
The National Cyber Security Centre, the UK’s national technical authority for cyber security, covers backups, device and account protection, and spotting scams in its small organisations guidance (ncsc.gov.uk). These topics provide a useful starting point for defining a review.
Agree who owns each security task
Security enquiries often involve more than a software purchase. Your scope may need to address who approves access, who reviews outstanding actions and who coordinates with application or cloud suppliers.
If monitoring, specialist assessment or incident support is required, name it separately. Describe the coverage and responsibilities you want to discuss rather than assuming they are included in ordinary help desk support.
Report concerns without exposing information
For an existing concern, describe what you observed, when it happened and the business effect. Don’t paste suspicious message contents containing personal information or upload affected files through the enquiry form.
If an incident is underway, follow your established incident process and use your existing incident contact. Keep account credentials and recovery information private.
Use the contact form to outline the security work you need, the systems involved and your current responsibilities.