A practical starting point for Durham
Start with your security responsibilities
For a business in Durham, cyber security should follow the information and decisions it needs to protect. A visiting tutor can still reach course administration records after their engagement ends. The review should distinguish access needed to teach a session from access that exposes broader organisational information. This is an illustrative situation. Ask 39Support which controls, investigation coverage and response responsibilities your chosen plan includes. Set priorities around your own business.
Illustrative business scenario — use it to identify the questions that matter in your own organisation.
Match access to the role
Record why employees, contractors and other users need each system, then give managers a workable approval and review process. Define separate roles for employees, visiting tutors and learners, with a named approver for access to administration or personal records.
Remove access deliberately
Connect role changes and departures to account permissions, shared workspaces and equipment returns, preserving company records that authorised colleagues still need. Tie the removal or review of temporary permissions to course and engagement dates, including external learning platforms outside the main account directory.
Make awareness practical
Use situations employees actually encounter and give them a clear reporting route, without expecting staff to investigate a suspicious item themselves. Explain suspicious shared documents and sign-in requests using examples tutors encounter, and give temporary colleagues a clear reporting contact.
How we support your business in Durham
Our UK helpdesk provides a central route for your team. We agree the covered users, devices, locations and applications, then document onboarding and escalation responsibilities. The service is provided through an ongoing monthly agreement.
39Support’s operational office is in North Weald, Essex. Durham is a service area, rather than a branch location. Physical attendance, travel arrangements and any site-specific response requirement are confirmed for your postcodes in the proposal.
Microsoft 365, devices and identity
Where appropriate, we combine Microsoft 365 Business Premium licensing with Intune management and Entra identity controls. Licence subscriptions, management and any Azure resource costs are itemised. Planned onsite cyber security and AI training can support your people as part of the agreed programme.