IT for regulated businesses

IT for regulated businesses: compliance you can prove

Financial services, distribution, manufacturing and other companies that have to prove they take security seriously. We hold Cyber Essentials Plus, ISO 9001 and ISO 27001 ourselves, so we know what auditors look for. We work with companies in Hull, Yorkshire, London and anywhere in the UK, remotely.

Get an IT Assessment See pricing

Tenders, insurers and auditors tend to ask the same questions. Is multi-factor authentication switched on for everyone? Are backups tested? Who can open what? Are your IT policies written down?

We put those controls in place, keep the records that show they’re working, and help you answer each questionnaire accurately. For Cyber Essentials, start with our free readiness checklist.

Dental practices

A dental practice holds some of the most sensitive data there is. Patient records are health data, which UK GDPR treats as special category data that needs extra protection. Practices that treat NHS patients have a second set of rules: every organisation with access to NHS patient data and systems must use the NHS Data Security and Protection Toolkit to show it handles that data securely.

From our work

We’ve moved several clients off Windows 10 ahead of the end of support. One request came from a local dental practice worried about Windows 10 and Windows Server 2016 reaching end of life. When we looked, the problems went further: their licensing wasn’t correct, the server was ten years old, and nobody was looking after their IT. As a dental practice, they also have NHS compliance to meet, so out-of-date systems were a compliance risk as well as a security one.

David Gilbey, Just Gilbey IT Solutions

Windows Server 2016 reaches the end of Microsoft’s extended support in January 2027. After that, Microsoft stops releasing free security updates for it.

We keep a practice’s computers and servers supported and patched, look after Microsoft 365 and backups, and keep the records that show those controls are working. An IT Assessment shows what’s out of date before it becomes a problem.

Estate and letting agents

Estate and letting agents handle identity documents, bank details and large payments. Estate agents are supervised for anti-money laundering, and so are letting agents who handle lettings at 10,000 euros a month or more.

Registration: HMRC supervises estate agency businesses, and it’s a criminal offence to trade as one without being registered. Letting agency businesses must register when they handle lettings with a monthly rent of 10,000 euros or more.
Records: HMRC’s guidance for estate and letting agency businesses (a document file) says the evidence from your customer due diligence checks must be kept for at least five years after the business relationship ends. That’s years of passports and bank statements on your systems, and UK GDPR expects you to keep them secure.
Letting agents in England must also belong to a government-approved redress scheme, and those holding client money must belong to a client money protection scheme.
Payments: deposits, rent and other payments are often arranged by email, which makes agents a target for payment diversion fraud. Our phishing guide shows how to spot the fake emails.

We set up Microsoft 365 so ID documents are only open to the people who need them, switch on multi-factor authentication, protect your email, train your staff to spot phishing and test your backups.

IT for regulated businesses

What matters to regulated businesses

The pressures on a business like yours, and what we do about each one.

Case file
Cyber Essentials for tenders and clients
A tender or a new client asks for your Cyber Essentials certificate, and you don’t have one yet.
What we doWe help you get Cyber Essentials, or Cyber Essentials Plus, and keep your systems compliant afterwards.
Case file
Insurer questionnaires
Cyber insurers want evidence of controls such as multi-factor authentication before they’ll provide cover.
What we doWe put the controls in place, provide many of them as standard, and help you answer the questions accurately.
Case file
Data protection and GDPR
Customers and insurers now ask how you store and protect their data.
What we doLeast-privilege access, encryption and multi-factor authentication, plus help with the policies that sit behind them.
Case file
Policies and evidence
Auditors, insurers and clients want to see your IT policies in writing.
What we doWe help define, develop and document your IT policies as part of a wider IT strategy.

The standard you’re asked for

Cyber Essentials

Tenders and larger clients increasingly ask for Cyber Essentials before they’ll work with you.

Source: NCSC: About Cyber Essentials

Free check

Before a customer pays a fake invoice

Could someone send email pretending to be your company?

Fake invoices and payment requests sent from a lookalike or spoofed domain are one of the most common frauds. Check your domain’s defences in seconds. Results appear on screen, and you don’t need to give us your details.

What we do for regulated businesses

Most relevant first.

Cyber Security

24/7 threat detection, DMARC on your email and phishing training for your staff.

Managed IT Support

Your whole IT looked after for a fixed monthly price: support, security, licence management and backups.

IT Consulting

An IT roadmap and budget that line up with where your company is going.

Backup & Disaster Recovery

Tested backups and a recovery plan, so one bad day doesn’t become a lost week.

Also from us: Cloud Services, AI & Copilot, Business Phones (VoIP), Co-managed IT

Pricing

What it costs a business like yours

Change the number of people. Both plans are worked out in full, with nothing hidden behind a form. Add what else you need underneath.

How many people in your company use a computer?

For a regulated business with 5 people, excluding VAT:

MYLE Essentials

Pay-as-you-go IT support

£240.50 a month

Microsoft 365 licences not included. Microsoft 365 Business Premium is required.

£18.10 × 5 people: £90.50
Company retainer: £150
+: quoted

One-off onboarding: usually £240.50, up to £360.75

Companies that only need IT help when something goes wrong, but want their backups, email protection and domain sorted.

MYLE Premium

Unlimited proactive remote IT support

£850 a month

Microsoft 365 licences not included. Microsoft 365 Business Premium is required.

Minimum for 3 to 10 people: £850
+: quoted

Premium is £475 a month for 1–2 people, £850 for 3 to 10, then £83.10 per person from 11.

One-off onboarding: usually £850, up to £1,275

Companies that want day-to-day management, unlimited support and 24/7 security monitoring.

Add-ons

The plans cover the essentials. Add what your company needs, and ask us about anything that isn’t listed. There are many more than these six: need something else? Ask us.

One-off onboarding: usually one month’s fee, paid upfront, and up to 1.5× when there’s more to do, such as migrations or a lot of work to bring things up to our standards. We agree it with you before you start. Plus a Microsoft 365 Business Premium licence for each user, at Microsoft’s current price. 12-month minimum term on every plan, none after the first year. Unusual or complex IT? MYLE Custom is on application.

For insurer questionnaires: Premium includes 24/7 human-led threat detection (EDR) and 24/7 Microsoft 365 account monitoring.

Proof you can check yourself

What each certificate means for a business, with a link to the register where you can check it.

Cyber Essentials Plus
A UK government-backed scheme that certifies basic security controls. Plus adds independent technical testing.
We hold it ourselves and can help you get certified.
Check it : Cyber Essentials Plus, Check on the IASME certificate search (opens in a new tab)
ISO 9001 (quality management)
The international standard for quality management.
Documented, repeatable ways of working, checked by an outside auditor.
Check it : ISO 9001 (quality management), Check on UKAS CertCheck (opens in a new tab)
ISO 27001 (information security)
The international standard for managing information security.
Information that passes through our hands is handled to a certified standard.
Check it : ISO 27001 (information security), Check on UKAS CertCheck (opens in a new tab)

David helped define, develop and document our company IT policies, which helped form part of our larger IT strategy. I was very happy with the level of professionalism whilst at the same time keeping it simple and easy to understand. I look forward to working alongside Just Gilbey Ltd in the future and can recommend them to anyone else for IT assistance and support.

AshleyCEO, Compare Technology

Questions regulated businesses ask

What is Cyber Essentials?

A UK government-backed scheme that certifies a set of basic security controls. Cyber Essentials Plus adds independent technical testing. Read more from the NCSC, or try our Cyber Essentials readiness checklist.

Are you certified yourselves?

Yes. We hold Cyber Essentials Plus, ISO 9001 (quality management) and ISO 27001 (information security). You can check each one on the certification bodies’ websites from the badges on this site.

Which sectors do you work with?

Mainly legal, accountancy and financial services, plus distribution and manufacturing, and other companies where compliance matters.

Does a dental practice need the Data Security and Protection Toolkit?

If it has access to NHS patient data and systems, yes. The NHS says every organisation with that access must use the Data Security and Protection Toolkit to show it handles personal information securely.

Do letting agents have to register with HMRC for money laundering?

Only if they handle lettings with a monthly rent of 10,000 euros or more, for a month or longer (HMRC’s guidance for letting agency businesses). Estate agency businesses must register with HMRC, and it’s a criminal offence to trade without being registered.

Sources

The rules and guidance this page refers to.

Where we work: Hull & East Yorkshire · York · Leeds · London, and remotely anywhere in the UK.

Also: IT for solicitors · IT for accountants

Find out where your IT stands

Our IT Assessment takes about two minutes. Tell us about your company and what’s prompting the change, and we’ll tell you what to do next.

Get an IT Assessment See pricing 01482 274969

Everything we can help with

Start from what you need to get done.

What do you need?

Check something

Fix or protect something

Plan something

I’m already a client