Managed IT and security for UK financial services firms: IFAs, wealth managers, accountants, payment businesses and fintechs. FCA and ICO requirements treated as the baseline, not the aspiration.
Generic managed IT is good enough for most UK SMBs. It is not good enough when your client agreement has an ICO clause, your PI insurer wants a Cyber Essentials Plus certificate, and the FCA can walk in next quarter.
We run the stack every regulated firm eventually lands on. MFA enforced, conditional access, endpoint EDR, email DMARC to reject, DLP on client data, and monitored 24/7 by a real SOC. Then we keep the evidence pack current so audit day is boring.
The FCA, PRA and your auditor all want the same things: evidence, segregation, recovery. We bake those controls in from day one and keep the paper trail current.
Q1 access review, backup verification and change log exported. 0 findings.
The controls you need, without the business-case debate. Included in the service.
MFA, audit logging, endpoint EDR, email DMARC, and DLP configured to the expectations of the FCA SYSC handbook and the ICO accountability principle.
Included on the Premium plan. Microsoft Purview sensitivity labels, DLP policies on client data and payment information, automated retention and disposal.
Huntress MDR on every endpoint, Microsoft 365 sign-in and mailbox watch, and written incident reports when anything trips the wire.
Quarterly control evidence packs for ISO 27001, SOC 2, ICO assessments and insurer questionnaires. Zero scramble on audit day.
HR-integrated provisioning. New hires have accounts, laptops and MFA on day one. Leavers are offboarded and audited within the hour.
Intune-managed laptops with drive encryption, USB control, BitLocker recovery held, and automated patch within 72 hours of release.
"They passed our insurer questionnaire, our FCA inspection and our SOC 2 audit without a single finding in IT. First time in four years."
Head of Operations, Midlands-based IFA
30 minutes with our engineer and compliance lead. We will look at your current state against the regulatory baseline and give you a written list of the three things to fix before the inspector arrives.