We already have antivirus and a firewall - do we need this?

Antivirus and a firewall are two controls. Cyber Fundamentals covers the whole picture - identity, devices, email, network, cloud and applications - and shows you where the real gaps are. Most SMEs find at least three or four material gaps on their first review.

Where should we actually start?

Nine times out of ten the highest-value first step is a Microsoft 365 Security Hardening Review. Most SMEs already pay for Business Premium and are not using the security controls properly. The second step is usually a Cyber Asset and Exposure Review to find what you don't know about.

Do we have to buy a bundle?

No. We can deliver any element individually. The bundles exist because most customers want a clear price for a known-good baseline rather than picking through a menu.

Will this help with cyber insurance and tenders?

Yes. The controls in Cyber Foundation and Cyber Plus map directly to what insurers and procurement teams ask for - MFA, admin separation, patching, malware protection, backup and incident response.

Do you replace our existing IT provider?

Not unless you want us to. We regularly work alongside an incumbent IT team or MSP, focusing only on the security layer and sharing evidence and recommendations.

How quickly can we get started?

A Cyber Fundamentals review is usually scoped within a week and delivered over two to three weeks. Foundation-level hardening typically follows immediately afterwards.

27 capabilities | 5 domains | UK delivered

The Cyber Fundamentals every UK business needs

A clear, vendor-fluent view of the 27 cyber security capabilities Telappliant deploys and manages - mapped to Cyber Essentials, ISO 27001 and the NCSC 10 Steps. Pick a domain, drill into a capability, and see exactly what good looks like.

Book a fundamentals review Get your cyber risk score

The five domains

Where every control fits

Every capability sits in one of five domains. Click a domain to see the controls within it.

UK developer pair reviewing a secure code dashboard on dual monitors in a modern office

Applications

6 controls

Application & identity controls

Lock down how people sign in to apps, control what code can run, keep software patched, and stop public-facing systems being exploited.

Explore applications

Endpoint

6 controls

Laptops, desktops & mobile devices

Every laptop, desktop and mobile is hardened, monitored and recoverable - the device controls Cyber Essentials and your insurer expect.

Explore endpoint

Rack-mounted next-gen firewall with fibre patch cables in a UK datacentre

Gateway & Edge

5 controls

Email, web, firewall & remote access

The perimeter your users actually meet - email, web browsing, firewalls and remote access - is filtered, inspected and authenticated.

Explore gateway & edge

Network

7 controls

Identity, governance & risk

The controls that prove you're in control - identity governance, vulnerability management, DMARC and IT governance tooling.

Explore network

Hyperscale datacentre aisle at blue hour with cyan accent lighting

Cloud

3 controls

Cloud apps, posture & WAN security

Microsoft 365, Google Workspace, AWS and Azure secured the way they should be - visibility, posture management and secure connectivity.

Explore cloud

The full index

All 27 capabilities

A complete A-Z. Each capability links to a dedicated page with features, advantages, benefits and outcomes.

Where to start

The recommended customer journey

Cyber can become a confusing mix of separate tools, suppliers and gaps. This is the order we recommend SMEs follow - each step builds on the last and avoids spending on tools you don't need yet.

Priority 1
Microsoft 365 Security Hardening Review
Get more from the Microsoft licences you already pay for - MFA, Conditional Access, Defender, Intune, BitLocker.
Learn more
Priority 2
Cyber Asset and Exposure Review
Find unknown assets, shadow SaaS and exposed services before attackers do.
Learn more
Priority 3
Cyber Essentials and Insurance Readiness
Prove the basics and answer customer, tender and insurance questions with confidence.
Learn more
Priority 4
Email, Phishing and Awareness
Tighten phishing protection and train people to spot real-world attacks.
Learn more
Priority 5
Managed Endpoint, Patch and Vulnerability
Keep devices patched, monitored and recoverable - the controls insurers care about most.
Learn more
Priority 6
Managed SOC / MDR Upgrade
Add detection and response when the basics are in place and the risk profile justifies it.
Learn more

Bundles

Three ways to buy

Pick the tier that matches your risk and budget. You can move up at any time - we keep evidence and configuration so nothing is lost.

Cyber Foundation

Get the basics under control

Microsoft 365 hardening baseline
MFA and admin protection
Endpoint anti-malware
Patch and update management
Cyber Essentials preparation

Start with M365 hardening

Cyber Plus

Managed assurance with monthly reporting

Everything in Foundation
Managed endpoint with EDR
Vulnerability scanning
Advanced email and phishing protection
Monthly security report and review

Start with M365 hardening

Cyber Advanced

Add SOC/MDR and incident response

Everything in Plus
Managed SOC / MDR with alert triage
SASE / ZTNA secure access
Incident response retainer
Compliance and audit support

Start with M365 hardening

Book a Cyber Fundamentals review Speak to a cyber specialist

Free scorecard

Score your cyber posture in 60 seconds

Nine questions mapped to Cyber Essentials and insurer expectations. Get an indicative score and a prioritised gap list.

Why UK businesses pick Telappliant for the fundamentals

3000+ UK organisations served and 100000+ end users supported.

< 60 minute average response on security incidents.

4000+ tickets resolved every month with measurable first-time-fix rates.

FAQs

Common questions about Cyber Fundamentals

Quick, honest answers to the questions account managers hear most.

Talk to a UK technology partner who's done this for 20 years

Book a practical, no-pressure consultation. We'll review your current setup, show where AI communications, cloud telephony or managed IT could improve customer experience and reduce admin - and tell you straight if you don't need us.

UK-based people, real account management
Honest recommendations - even if it's not us
Practical AI where it adds value, not hype

Book a consultation Review my phone system

The Cyber Fundamentals every UK business needs