A practical starting point for Derby
Start with your security responsibilities
For a business in Derby, cyber security should follow the information and decisions it needs to protect. A customer asks a technical supplier to demonstrate its recovery and access controls before renewing work. The business needs clear evidence of present arrangements and a realistic list of remaining improvements. This is an illustrative situation. Ask 39Support which controls, investigation coverage and response responsibilities your chosen plan includes. Set priorities around your own business.
Illustrative business scenario — use it to identify the questions that matter in your own organisation.
Make controls demonstrable
Keep a current record of delivered controls, unresolved gaps and named owners, so customer questions can be answered accurately and consistently. Connect each questionnaire answer to an actual system, configuration or service record and identify where supporting evidence is still missing.
Test useful recovery
Choose a representative business activity and establish whether its data, access and application dependencies can be restored through the agreed arrangements. Choose a meaningful technical project for recovery testing, accounting for application licences and dependencies needed to make the restored files useful.
Prepare for a focused assessment
Agree the scope, evidence and expected output of a security review, distinguishing improvement work from any separately arranged certification assessment. Scope any certification preparation separately and describe outstanding actions clearly, keeping a readiness review distinct from an awarded certificate.
How we support your business in Derby
Our UK helpdesk provides a central route for your team. We agree the covered users, devices, locations and applications, then document onboarding and escalation responsibilities. The service is provided through an ongoing monthly agreement.
39Support’s operational office is in North Weald, Essex. Derby is a service area, rather than a branch location. Physical attendance, travel arrangements and any site-specific response requirement are confirmed for your postcodes in the proposal.
Microsoft 365, devices and identity
Where appropriate, we combine Microsoft 365 Business Premium licensing with Intune management and Entra identity controls. Licence subscriptions, management and any Azure resource costs are itemised. Planned onsite cyber security and AI training can support your people as part of the agreed programme.