ITC Systems / IT support in Dunstable / Cyber security

Managed cyber security, from vulnerability management to Cyber Essentials Plus.

ITC Systems provides managed cyber security for small and medium-sized organisations. We identify and remediate vulnerabilities, automate patch management across every device and support you through Cyber Essentials and Cyber Essentials Plus certification. As a Sophos Partner, we deliver and manage enterprise-grade endpoint, firewall and email protection.

Managed cyber security

Sophos Partner
Endpoint, firewall and email protection, with 24/7 MDR
Automated patch management
Operating systems and applications kept current
Cyber Essentials and CE+
Gap assessment, remediation and certification support

Security incident response

Suspect a security incident? Contact us immediately.

Our engineers can begin containment remotely. Incident support is available to non-clients.

Call 01234 363696

Our services

Managed cyber security services

A layered approach combining continuous vulnerability management, automated patching and proven Sophos protection, aligned to the Cyber Essentials standard and managed by one accountable team.

01

Vulnerability management

Scheduled scanning of every device and your internet-facing systems, with findings prioritised by real-world risk so the most serious exposures are remediated first.

02

Automated patching and updates

Windows, macOS and everyday business apps updated automatically, tested on a small group first and installed outside working hours.

03

Cyber Essentials

A gap assessment against the current requirements, remediation of any shortfalls and support completing your self-assessment with an accredited certification body.

04

Cyber Essentials Plus

Devices prepared and verified ahead of the independent technical audit, maximising the likelihood of passing first time and avoiding a retest.

05

Sophos endpoint protection and MDR

As a Sophos Partner, we deploy and manage Sophos protection on every device, with optional 24/7 managed detection and response.

06

Email security and phishing training

Advanced filtering that blocks malicious email before delivery, supported by simulated phishing and training so staff can recognise attempts that evade it.

07

Microsoft 365 and identity security

Multi-factor authentication on every account, conditional access in Entra ID and Microsoft 365 settings hardened against account takeover.

08

Firewalls and network security

Sophos firewalls configured, monitored and kept up to date, with secure remote access and separate networks for guests and devices.

09

Backup and ransomware recovery

Immutable, offsite backups that cannot be encrypted or deleted by attackers, tested regularly to ensure rapid recovery.

Patching and update management

Automated patch and update management

Most successful attacks exploit known vulnerabilities for which a fix was already available. Our management platform automates patching across every device we manage and continuously scans for remaining exposures, so known vulnerabilities are remediated within days rather than months.

Staged deployment
Updates are released to a pilot group first, then deployed organisation-wide outside working hours.
Operating systems and applications
Windows and macOS, together with browsers, PDF readers, collaboration tools and other business software.
Exception handling
Failed or deferred updates are flagged automatically and remediated by our engineers.
Cyber Essentials compliance
High and critical updates are applied within the 14-day period the standard requires.

Example monthly security report

A clear monthly summary of your security position.

Devices fully patched48 of 48
Critical vulnerabilities open0
App updates installed this month212
Threats blocked by Sophos7
Next patch windowTuesday, 10pm

Cyber Essentials and Cyber Essentials Plus

Cyber Essentials certification support

Cyber Essentials is the UK government-backed certification scheme demonstrating that essential security controls are in place. It is increasingly required by customers, insurers and public sector buyers. We support you from initial gap assessment through to certification and ongoing compliance.

1

Gap assessment

Your devices, accounts and cloud services are reviewed against the current requirements, with every gap documented.

2

Remediation

We address each finding, including MFA, patching, firewall rules, administrative rights and unsupported software.

3

Certification

We support your self-assessment with an accredited certification body and prepare devices for Cyber Essentials Plus testing.

4

Ongoing compliance

Automated patching and monthly reviews maintain compliance throughout the year and simplify renewal.

What changed in April 2026

The standard is now stricter. We will ensure you are ready.

  • MFA is mandatory on every cloud service that supports it; omission is an automatic fail.
  • Cloud services such as Microsoft 365 must be included in scope.
  • High and critical updates must be applied within 14 days, for applications as well as operating systems.
  • Cyber Essentials Plus devices that fail testing must be remediated and retested alongside a new sample.

Why ITC Systems

Why organisations choose ITC Systems

Sophos Partner

We deploy and manage Sophos endpoint, firewall and email protection, with 24/7 managed detection and response available.

Integrated IT and security

IT support and security are delivered by the same team, removing gaps between suppliers.

Transparent reporting

Monthly reports detail patch status, identified vulnerabilities and remediation, providing evidence for insurers, auditors and customers.

Serving Dunstable

Cyber security for organisations in Dunstable

We support manufacturers, trade businesses and offices across Dunstable, Woodside Industrial Estate and Houghton Regis, a short journey past Luton from our Bedford office. Many of these organisations are now asked by customers and suppliers to hold Cyber Essentials.

IT support in Dunstable

On-site attendance
Assessments, remediation and Cyber Essentials Plus testing
Remote management
Patching, scanning and protection managed centrally
Direct access
Experienced engineers, not a call centre

Questions

Frequently asked questions

What is the difference between Cyber Essentials and Cyber Essentials Plus?

Cyber Essentials is a verified self-assessment of five technical controls: firewalls, secure configuration, user access control, malware protection and security update management. Cyber Essentials Plus covers the same controls and adds hands-on technical testing of a sample of devices by an independent assessor. Under the requirements introduced in April 2026, devices that fail testing must be remediated and retested alongside a new sample, which makes thorough preparation essential.

Do we need to replace our existing antivirus with Sophos?

Not necessarily. We first assess your current solution. Where it meets requirements and can be centrally managed, it can be retained. Otherwise, we migrate you to Sophos in a controlled way, with no gap in protection.

How long does it take to achieve Cyber Essentials?

This depends on your starting point. A gap assessment identifies exactly what needs to be addressed. Once remediation is complete, the self-assessment itself is straightforward, and we support you through to certification.

Is cyber security relevant to manufacturing and trade businesses?

Yes. Manufacturing and trade organisations are regularly targeted by invoice fraud and ransomware. Core controls such as MFA, patching and email filtering prevent the majority of these attacks.

Arrange a cyber security review

We will assess your current position, identify priority risks and recommend a clear remediation plan, with no obligation. Available to organisations in Dunstable and the surrounding area.