Plain-English cyber security kits for UK small businesses
For UK sole traders and small businesses that don't have an IT team. Pick the kit for the job in front of you, download it and work through it yourself.
The problem
A customer sends you a security questionnaire. Your insurer's proposal form asks how you run your IT. A client asks whether you have Cyber Essentials. Since 19 June 2026, UK organisations that are responsible for people's personal information have had a legal duty to deal with data protection complaints. And if something goes wrong, someone has to know who to call.
If you don't have an IT team to hand these to, they land on you. The NCSC and the ICO publish guidance on these, but it's spread across many pages. It can be hard to tell which parts apply to a small business.
What we offer
Each kit takes the UK guidance on one of these jobs and turns it into plain-English steps and templates. You work through it yourself. Each kit lists its sources, so you can check them.
The kits help you prepare. They can't promise a pass, a contract or cover. Those decisions belong to the assessor, your customer or your insurer.
What's included
Six kits, in our suggested order. Each kit can be used on its own.
- Account Lockdown Kit: start with your own accounts. Plain-English steps to lock down your email, phone and accounts.
- Cyber Essentials Questionnaire Prep Kit: when a customer asks for Cyber Essentials. Prepare your self-assessment answers before you buy the assessment.
- Supplier Security Questionnaire Answer Kit: when a customer sends a security questionnaire. Answer it honestly and re-use your answers.
- Cyber Insurance Readiness Kit: when your cyber insurance proposal form arrives. Get your evidence ready before anyone signs.
- First Hour After a Breach: plan your first hour after an incident. A runbook, contact sheet and log, set up in advance.
- Data Protection Complaints Procedure Template Pack: when someone makes a data protection complaint. A procedure, form, letters and log to adapt.
Each kit's own page lists exactly what's in the download and in what format.
Before you buy
- It's self-serve. You buy a kit, download it and work through it yourself, with no calls or meetings with us.
- Every kit is a digital download. There are no physical items and no shipping.
- It's general information, not legal advice.
- Your rights as a buyer are set out in our store policies.
- Questions before you buy? Email intel@secordit.co.uk or use our contact page.
Who's behind it
We don't have customer reviews to show yet. Here's what you can check for yourself.
- Secordit Intelligence Ltd is registered in England and Wales, company no. 17050740.
- It was set up in February 2026 by Matthew Protheroe-Hill, its director. Before that, he co-founded Sencode Cyber Security and was a director there from 2019 to 2023.
- Qualification: BSc (Hons) Cyber Security & Networks (1st Class), Teesside University.
- Every kit lists the UK sources it's based on, so you can check the steps against them.
Questions about the kits
Do I need to be technical?
No. Every kit, for home or for business, is written in plain English for people who aren't IT specialists. Where a kit asks you to change settings, it starts with the ones already built into your phone, computer and apps.
How long does it take?
It depends on the kit and how much of it applies to you. Each kit starts with what matters most, so you can stop and come back to it. Some kits also include a check to repeat every few months.
What do I get, and in what format?
Every kit is a digital download. Each kit's own page lists exactly what's included and in what format. No physical items and no shipping.
Do I need all six?
No. Each kit can be used on its own. The order above is only a suggestion.
Will a kit get me through Cyber Essentials, an insurance proposal or a customer's questionnaire?
No kit can promise that. The assessor, your insurer or your customer decides. The kits help you prepare your answers and evidence.
Do I need to speak to you to use a kit?
No. The kits are self-serve, with no calls or meetings.
