Access and Identity
Who can reach what, whether leavers are really gone, and whether multi-factor covers every account or just most of them.
A UK team, working inside the Microsoft tools you already pay for
Who this is for
Is repetitive admin taking up too much of your team’s time?
A Cyber Review is a free assessment of where your security actually stands, run over one call by Sam Kennett, Head of Cyber Security and Sales at Intouch Tech. It covers user access, Microsoft 365 security, endpoints, device security, backups, passwords and credentials already circulating from old breaches, and the AI half most reviews skip: which tools your team uses, what data has gone into them, and the permissions sitting on connected apps.
You get a written summary afterwards with the findings ranked by what to fix first, benchmarked against Cyber Essentials, ISO 27001 and Microsoft 365 best practice. There is no charge and no obligation to change supplier. Plenty of reviews end with a list your current provider should be acting on, which you are free to take to them.
You get a written summary afterwards with the findings ranked by what to fix first, benchmarked against Cyber Essentials, ISO 27001 and Microsoft 365 best practice. There is no charge and no obligation to change supplier. Plenty of reviews end with a list your current provider should be acting on, which you are free to take to them.
Automated approvals
Multi-step routing with reminders, escalation & audit trails.
Secure & governed
Role-based access. Data stays in your Microsoft 365 tenant.
AI triggers
AI spots events and fires the right approval automatically.
AI triggers
AI spots events and fires the right approval automatically.
AI triggers
AI spots events and fires the right approval automatically.
Nine checks, one call
What we actually check
Sam works through your setup and answers the questions a director would ask, one by one. No jargon, no scoring system to decode.
Sam KENNETT
Head of Cyber Security
Runs the review with you, start to finish.
User access
Who still has a working login they should have lost months ago?
Business outcome
Eliminate AI blind spots and gain confidence in your AI adoption strategy.
Microsoft 365
Is multi-factor on for everyone, or for everyone except the busy ones?
Business outcome
Increase adoption while reducing risk.
Device security
A phone goes missing on the train. Can you wipe it?
Backups
If Friday's server died, what would Monday morning actually look like?
Business outcome
Demonstrate accountability and audit readiness.
Endpoints
If a laptop stopped reporting in, would anybody notice?
Passwords and credentials
Are any of your staff logins already circulating from an old breach?
Shadow AI
AI
Which AI tools is your team using that you have never approved?
Data in prompts
AI
Has a client file been pasted into a chatbot?
Where the gaps usually turn up
Four areas account for most of what we find. None of them need a new product to fix, and most are configuration rather than spend.
Microsoft 365
Tenant settings, sharing rules and mailbox forwarding, including the defaults nobody has revisited since the day you were set up.
Devices and Endpoints
Laptops and phones, patch state, disk encryption, and what actually happens the day one of them is left in a taxi.
Backup and Recovery
Whether the backup runs, what it covers, and whether anyone has ever tried restoring from it under pressure.
Your team
already uses AI
already uses AI
Most businesses find out what their staff pasted into a chatbot after something goes wrong. The AI half of the review tells you now, while it is still a policy problem rather than a breach.
Shadow AI
Which tools your team already relies on, approved or not, and which of them touch company data.
Data Exposure
What client, staff and commercial information has been pasted into public models, and where that leaves you.
Access and Permissions
Controls on the tools you do allow, plus third-party apps holding standing permissions on your Microsoft 365.
Governance and Habits
An acceptable-use policy people can follow, checks on AI output before it reaches a client, and training that sticks.
What you get,
in writing
in writing
The call is not the deliverable. A short written summary follows it, in language you can forward to your board or your current supplier without translating anything.
Findings, ranked. Every gap we find, ordered by what would hurt you most, not by a scanner's severity score.
A plan with dates. What to fix this month, what can wait until next quarter, and what your current supplier should already be doing.
A route to Cyber Essentials. If certification is the goal, you learn exactly what stands between you and passing it.
Findings, ranked. Every gap we find, ordered by what would hurt you most, not by a scanner's severity score.
A plan with dates. What to fix this month, what can wait until next quarter, and what your current supplier should already be doing.
A route to Cyber Essentials. If certification is the goal, you learn exactly what stands between you and passing it.
The team doing the reviewing
98
%
UK organisations
1000
+
UK organisations
12
+
Years in business
99.99
%
Uptime SLA
ISO 27001
And 9001
24
/
7
SOC monitoring
CE PLUS
Certified
FAQ
CYBER REVIEW questions
Answers to the questions UK businesses ask us most about the free cyber review.
Is the Cyber Review really free?
Yes. There is no charge for the review or the written summary, and no obligation to buy anything afterwards. You keep the findings either way.
Who carries out the review?
Sam Kennett, Head of Cyber Security and Sales at Intouch Tech. Every engineer and support person at Intouch is employed in the UK. There is no offshore helpdesk and no outsourced SOC.
What does the review cover?
User access, Microsoft 365 security, endpoints, backups, passwords and exposed credentials, device security and cyber hygiene, plus the AI half: which tools your team uses, what data has gone into them, permissions on connected apps, and whether you have an acceptable-use policy.
What is it benchmarked against?
Cyber Essentials, ISO 27001 and Microsoft 365 best practice. Intouch Tech holds Cyber Essentials Plus, ISO 27001 and ISO 9001, and is a Microsoft Solutions Partner.
What happens if we want Cyber Essentials afterwards?
Certification support starts at £420 plus VAT self-managed, £720 assisted or £1,420 fully managed. Most businesses certify in seven to ten working days, and Cyber Essentials Plus must follow within 90 days of the basic certification.
Do we have to change supplier?
No. Plenty of reviews end with a list of things your current supplier should be doing, which you are free to take to them.
Not sure it is only cyber?
George runs the wider review: phone systems, connectivity, Microsoft 365, devices, backups and who is meant to be supporting each one.
George Ashley
Senior Account Executive
FREE CYBER REVIEW
Book Your Free Cyber Review
We'll review your current security, find the gaps that put you most at risk, and give prioritised, plain-English recommendations. Benchmarked against Cyber Essentials, ISO 27001 and Microsoft 365 best practice.
0333 370 7000
Mon-Fri 8am-5pm · 24/7 for managed clients
[email protected]
Response within 1 business day, guaranteed
United Kingdom
UK-based team, since 2012
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
