A practical starting point for Edinburgh
Start with your security responsibilities
For a business in Edinburgh, cyber security should follow the information and decisions it needs to protect. An individual with broad administration rights also handles ordinary client email through the same account. The review should examine powerful permissions, routine working practices and the decisions needed if that identity is compromised. This is an illustrative situation. Ask 39Support which controls, investigation coverage and response responsibilities your chosen plan includes. Set priorities around your own business.
Illustrative business scenario — use it to identify the questions that matter in your own organisation.
Limit powerful permissions
Identify the accounts that can change security or grant access, and distinguish those responsibilities from ordinary day-to-day use of company services. Identify the identities able to administer company services and agree an appropriate distinction between powerful tasks and ordinary daily work.
Protect the sign-in route
Check who can access company services, how identities are verified and which recovery methods an authorised employee can use. Review protection and recovery for partners and authorised administrators, including a workable process when a normal authentication device is unavailable.
Practise the first response
Agree who receives an incident report, who can authorise urgent changes and how the business keeps essential contact details available. Name the people who can approve account restrictions and urgent recovery actions, with authorised cover if the usual partner cannot be reached.
How we support your business in Edinburgh
Our UK helpdesk provides a central route for your team. We agree the covered users, devices, locations and applications, then document onboarding and escalation responsibilities. The service is provided through an ongoing monthly agreement.
39Support’s operational office is in North Weald, Essex. Edinburgh is a service area, rather than a branch location. Physical attendance, travel arrangements and any site-specific response requirement are confirmed for your postcodes in the proposal.
Microsoft 365, devices and identity
Where appropriate, we combine Microsoft 365 Business Premium licensing with Intune management and Entra identity controls. Licence subscriptions, management and any Azure resource costs are itemised. Planned onsite cyber security and AI training can support your people as part of the agreed programme.