admin

Tickets that used to get picked up within the hour now take a day. “Someone will call you back” turns into silence until you chase it yourself. Nothing dramatic has happened. It’s just quietly stopped feeling like support.

Nobody switches provider over one dramatic failure. It’s always a slow accumulation of small things nobody quite got round to complaining about, until enough of them stack up. These are the five reasons we hear most from businesses looking to switch IT support provider.

1. Response times that have quietly got worse

Every provider is fast to answer the phone when they’re trying to win your business. The real test is what happens eighteen months in. A ticket that used to get picked up within the hour starts taking a day. “Someone will call you back” turns into silence until you chase it yourself. It happens gradually enough that you barely notice, right up until you compare notes with another business owner and realise your “normal” isn’t.

2. Communication that leaves you guessing

Not the same thing as speed. This is about whether anyone tells you what’s happening while you wait. Has the ticket been picked up? Is it stuck on a part, a password, or a decision from you? A provider who updates you without being chased is doing something most don’t bother with. Its absence is the single most common complaint we hear from businesses looking to leave.

3. A provider who only ever reacts

Reactive support waits for something to break, then fixes it. Proactive support catches the failing hard drive, the licence about to lapse, the patch that’s overdue, before any of it becomes your problem. If every conversation with your current provider starts with something already having gone wrong, they’re running break-fix and calling it managed support.

4. A friendly voice on the phone, but not much security expertise behind it

Plenty of smaller IT providers are genuinely good at keeping day-to-day systems ticking over, but haven’t kept pace with how much cyber security now matters. That gap stays invisible until it’s tested, usually by an actual incident, or by a client, insurer or supplier asking a direct question your provider can’t answer with any confidence.

5. Bills that don’t match what was promised at the start

Nothing burns trust faster. A low headline rate that turns out to exclude “extras” that come up constantly in practice, like onsite visits, or anything beyond a narrow definition of “basic troubleshooting,” leaves a business feeling misled even when nothing was technically hidden in the contract. Once that trust goes, it doesn’t come back.

None of these five are dramatic on their own. That’s the point. It’s the combination of two or three that finally tips a business owner from “this is just how IT support is” to “we need something better.” If you read that list and nodded more than once, that’s not something to shrug off.

It’s also a far more common move than people think. Most businesses your size already have external IT support: 64% of businesses with 10 to 49 employees, and 70% of those with 50 to 249, already outsource it (DSIT, Cyber Security Breaches Survey 2025/2026). So the real question was never whether to have support. It’s whether the one you’ve got is actually any good, and switching provider is far less disruptive than most people expect, more on that in a future post.

Ready to switch IT support provider?

If more than one of these sounds familiar, get in touch for a straightforward chat about what’s not working and what good support should look like instead. No pressure, no obligation, just an honest conversation.

Source: Department for Science, Innovation and Technology (DSIT), Cyber Security Breaches Survey 2025/2026, GOV.UK.

---

---

If you’re a business owner in the UK, chances are you’ve already faced some form of cyber threat — from phishing emails to staff clicking suspicious links. But the truth is, most cyber incidents can be prevented with a simple first step: a written IT security policy.

This isn’t just a tick-box exercise. A clear policy helps protect your staff, your data, and your reputation — and is a key requirement of the UK Government’s Cyber Essentials scheme (Cactus IT are certified- click here to see why).

Even if you don’t have an in-house IT team, having a basic, business-wide policy creates structure, accountability, and peace of mind — especially as your team grows.

---

Why is an IT Security Policy Essential for Your Business?

Cyber threats aren’t just a problem for large corporations — small and medium-sized businesses (SMEs) are now among the most frequently targeted by cyber criminals. Why? Because they often have fewer defences in place, and attackers know it.

A written IT security policy is your first line of defence. It turns vague expectations into clear, enforceable rules — and ensures everyone in the business understands their role in protecting company data.

Here’s why every business, no matter the size, should have one:

---

✅ 1. It Sets Clear Expectations for Staff

Most cyber breaches start with human error — a weak password, a dodgy email link, or someone using personal devices for work. A security policy tells your team:

• What’s acceptable and what’s not
• How to handle company devices and data
• How to respond to suspicious activity

It gives people the confidence to act responsibly, and the guidance they need to avoid costly mistakes.

---

✅ 2. It Helps You Respond to Incidents Quickly

If something goes wrong — a lost laptop, a phishing attack, or a data breach — a security policy ensures everyone knows what to do:

• Who to report it to
• What the first steps are
• How to limit the damage

Without a policy, you’re left scrambling in a crisis. With one, you’ve got a plan.

---

✅ 3. It Supports Compliance and Certifications

UK businesses are increasingly expected to demonstrate good cyber hygiene — by insurers, regulators, and customers. An IT policy:

• Helps meet GDPR and Cyber Essentials requirements
• Shows that you take data protection seriously
• Can even reduce cyber insurance premiums

If you plan to bid for government contracts or work with larger organisations, this is especially important.

---

✅ 4. It Builds Trust with Customers

Your customers want to know their information is safe. When you show them you have clear, documented policies in place, it builds confidence and trust. It shows you’re proactive — not reactive — about cyber security.

---

✅ 5. It Grows With Your Business

A good IT policy isn’t just for now — it evolves as your team, tools, and risks grow. Whether you’re a 5-person team or 250 strong, it’s the foundation of a security-first culture.

Need Help with Cyber Security?

At Cactus IT, we help small and medium-sized businesses across the UK build real-world, Cyber Security defences contact us today to book a free review.

Complete the form below to download a free sample Cyber Security template

Before publishing your Cyber Security template, please be sure to carry out your own legal and compliance checks on the document.

UK businesses are increasingly being targeted by cyber criminals — and ransomware is one of the most devastating threats. But while many businesses assume services like OneDrive or Google Drive keep them protected, that’s not the full story.

In this blog, we’ll explain why OneDrive is not a backup solution, what true backup protection looks like, and how you can safeguard your business from downtime, data loss, and costly recovery.

💣 What is Ransomware?

Ransomware is a type of malware that encrypts your files, then demands a ransom to unlock them. Victims often face:

• Complete loss of access to business-critical data
• Downtime while systems are restored
• Potential loss of customer trust
• In some cases, fines for breaching data protection laws

According to the UK’s NCSC, ransomware is one of the most significant cyber threats facing small and medium-sized businesses.

☁️ Why OneDrive is Not a Backup Solution

OneDrive (and similar cloud storage services like Dropbox or Google Drive) is great for:

• File syncing across devices
• Collaboration and sharing
• Version history (to a limited degree)

But here’s why it doesn’t count as a true backup:

1. It syncs, not backs up

If ransomware hits your PC, those encrypted files will sync to OneDrive too — meaning your cloud version becomes encrypted as well.

2. Limited version history

OneDrive does have a version history feature, but:

• It only retains a limited number of versions
• It may not work for all file types
• It doesn’t always include deleted files
• It’s not guaranteed for recovery from large-scale data loss

3. No offline or immutable copy

Backups should be offline, separate, and secure — ideally with versions that ransomware can’t touch. OneDrive is always connected, and that makes it vulnerable.

🔁 What Does a Proper Backup Strategy Look Like?

A real business backup plan includes:

✅ Automated, regular backups: Data should be backed up daily (or more often), without relying on staff to do it manually.

✅ Separate storage locations: At least one copy of your backup should be stored offsite or in a separate cloud environment that’s not automatically synced.

✅ Version history & retention: Good backup systems let you roll back to a specific point in time — useful if ransomware has been active for days before detection.

✅ Immutable backups: Some solutions offer “immutable” storage, meaning once the backup is written, it can’t be altered — even by ransomware.

✅ Regular testing: A backup is only good if it can be restored. We help our clients regularly test their backups to make sure everything works when it matters most.

🧩 What You Can Do Now

If you’re relying solely on OneDrive, Dropbox or similar, it’s time to rethink your approach. Here’s what we recommend:

1. Use OneDrive for collaboration, not backup
   • It’s a great tool — but it’s not designed for full disaster recovery.
2. Implement a proper cloud backup solution
   • We help customers set up secure, automated, and tested backups that comply with UK data protection laws.
3. Make ransomware part of your business risk plan
   • Prevention is key — but recovery is your safety net.

🟢 Our Advice for Businesses

At Cactus IT, we work with local businesses to build resilient, affordable backup plans tailored to their business needs — whether you’re a legal firm, manufacturer, or service provider.

Let’s have a chat about your current setup — we’ll tell you honestly if there are risks and how to fix them.

Want help getting your business protected against ransomware?

📞 Get in touch with our friendly team today and arrange a free review.

For businesses across Yorkshire and the UK, cyber security is a growing concern. Reports indicate a significant rise in cyber attacks targeting SMEs, with phishing being the most common method. If your business doesn’t have a dedicated IT security expert, implementing robust, yet simple, security measures is crucial.

A password manager like Keeper can be your frontline defence, bolstering both your cybersecurity and operational efficiency.

Elevate Your Cybersecurity Posture

Password managers help your business combat cyber threats and we have thoroughly tested and compared the current offerings. Our team agree, Keeper comes out best and this is why:

• Enforcing Strong, Unique Passwords: Weak or reused employee passwords are a major risk. Keeper generates complex, unique passwords for every account, enforcing strong security policies like minimum length and complexity, and identifying weak or reused credentials that need changing. This is critical as AI tools can now crack weak passwords. We like the passphrase generator that’s included, giving you the option for passwords or passphrases.
• Enabling Multi-Factor Authentication (MFA) and Passkeys: Keeper simplifies the use of MFA, adding an essential layer of security that can prevent unauthorised access even if a password is compromised. It can store Time-based One-Time Password (TOTP) codes. Furthermore, Keeper supports passkeys, a phishing-resistant, passwordless authentication method that simplifies logins while boosting security.
• Providing Secure, Encrypted Storage: Forget insecure sticky notes or spreadsheets. Keeper offers secure, encrypted storage for login credentials and sensitive data. It uses a zero-trust and zero-knowledge security architecture with full end-to-end encryption, ensuring only authorised users can access and decrypt their data.
• Securely Managing Access & Sharing: Define user access needs and organise employees into role-based groups, ensuring only appropriate personnel have access to specific passwords. Keeper also facilitates secure, encrypted sharing of passwords and files among team members, including time-limited sharing with non-users.
• Mitigating Risks from Employee Departures: Keeper streamlines the critical process of removing a departing employee’s access to all company systems and swiftly changing passwords, preventing data compromise.
• Dark Web Monitoring: Some Keeper plans include dark web monitoring (like BreachWatch), alerting you if your credentials appear online, enabling prompt action.
• Combatting Phishing Attacks: Keeper’s autofill feature helps employees avoid manually entering credentials on fake websites, significantly reducing susceptibility to phishing scams, which are a very common attack type.

Boost Your Operational Efficiency

Beyond security, Keeper enhances daily operations:

• Streamlined Onboarding & Offboarding: New hires get immediate, secure access to necessary login credentials based on their role, eliminating delays. Similarly, offboarding becomes quick and secure.
• Increased Employee Productivity: Employees only need to remember one master password to access their secure vault, saving valuable time spent on remembering or resetting forgotten credentials. KeeperFill automatically logs users into websites and apps across devices and browsers, boosting productivity.
• Centralised Organisation and Control: Keeper organises all team passwords with unlimited records and groups. The Admin Console offers powerful visibility and control, allowing quick user setup, disabling, removal, team creation, and policy enforcement.
• Long-Term Cost Savings: Investing in Keeper can prevent costly cyber attacks, data breaches, and business interruptions, ultimately saving your business significant money.

Don’t wait for an attack to strike. Strengthen your businesses digital defence and streamline operations. Start your free 14-day trial of Keeper Enterprise today to protect your company’s data and enhance productivity.