ITC Systems / IT support in Northampton / Cyber security

Managed cyber security, from vulnerability management to Cyber Essentials Plus.

ITC Systems provides managed cyber security for small and medium-sized organisations. We identify and remediate vulnerabilities, automate patch management across every device and support you through Cyber Essentials and Cyber Essentials Plus certification. As a Sophos Partner, we deliver and manage enterprise-grade endpoint, firewall and email protection.

Managed cyber security

Sophos Partner
Endpoint, firewall and email protection, with 24/7 MDR
Automated patch management
Operating systems and applications kept current
Cyber Essentials and CE+
Gap assessment, remediation and certification support

Security incident response

Suspect a security incident? Contact us immediately.

Our engineers can begin containment remotely. Incident support is available to non-clients.

Call 01234 363696

Our services

Managed cyber security services

A layered approach combining continuous vulnerability management, automated patching and proven Sophos protection, aligned to the Cyber Essentials standard and managed by one accountable team.

01

Vulnerability management

Scheduled scanning of every device and your internet-facing systems, with findings prioritised by real-world risk so the most serious exposures are remediated first.

02

Automated patching and updates

Windows, macOS and everyday business apps updated automatically, tested on a small group first and installed outside working hours.

03

Cyber Essentials

A gap assessment against the current requirements, remediation of any shortfalls and support completing your self-assessment with an accredited certification body.

04

Cyber Essentials Plus

Devices prepared and verified ahead of the independent technical audit, maximising the likelihood of passing first time and avoiding a retest.

05

Sophos endpoint protection and MDR

As a Sophos Partner, we deploy and manage Sophos protection on every device, with optional 24/7 managed detection and response.

06

Email security and phishing training

Advanced filtering that blocks malicious email before delivery, supported by simulated phishing and training so staff can recognise attempts that evade it.

07

Microsoft 365 and identity security

Multi-factor authentication on every account, conditional access in Entra ID and Microsoft 365 settings hardened against account takeover.

08

Firewalls and network security

Sophos firewalls configured, monitored and kept up to date, with secure remote access and separate networks for guests and devices.

09

Backup and ransomware recovery

Immutable, offsite backups that cannot be encrypted or deleted by attackers, tested regularly to ensure rapid recovery.

Patching and update management

Automated patch and update management

Most successful attacks exploit known vulnerabilities for which a fix was already available. Our management platform automates patching across every device we manage and continuously scans for remaining exposures, so known vulnerabilities are remediated within days rather than months.

Staged deployment
Updates are released to a pilot group first, then deployed organisation-wide outside working hours.
Operating systems and applications
Windows and macOS, together with browsers, PDF readers, collaboration tools and other business software.
Exception handling
Failed or deferred updates are flagged automatically and remediated by our engineers.
Cyber Essentials compliance
High and critical updates are applied within the 14-day period the standard requires.

Example monthly security report

A clear monthly summary of your security position.

Devices fully patched48 of 48
Critical vulnerabilities open0
App updates installed this month212
Threats blocked by Sophos7
Next patch windowTuesday, 10pm

Cyber Essentials and Cyber Essentials Plus

Cyber Essentials certification support

Cyber Essentials is the UK government-backed certification scheme demonstrating that essential security controls are in place. It is increasingly required by customers, insurers and public sector buyers. We support you from initial gap assessment through to certification and ongoing compliance.

1

Gap assessment

Your devices, accounts and cloud services are reviewed against the current requirements, with every gap documented.

2

Remediation

We address each finding, including MFA, patching, firewall rules, administrative rights and unsupported software.

3

Certification

We support your self-assessment with an accredited certification body and prepare devices for Cyber Essentials Plus testing.

4

Ongoing compliance

Automated patching and monthly reviews maintain compliance throughout the year and simplify renewal.

What changed in April 2026

The standard is now stricter. We will ensure you are ready.

  • MFA is mandatory on every cloud service that supports it; omission is an automatic fail.
  • Cloud services such as Microsoft 365 must be included in scope.
  • High and critical updates must be applied within 14 days, for applications as well as operating systems.
  • Cyber Essentials Plus devices that fail testing must be remediated and retested alongside a new sample.

Why ITC Systems

Why organisations choose ITC Systems

Sophos Partner

We deploy and manage Sophos endpoint, firewall and email protection, with 24/7 managed detection and response available.

Integrated IT and security

IT support and security are delivered by the same team, removing gaps between suppliers.

Transparent reporting

Monthly reports detail patch status, identified vulnerabilities and remediation, providing evidence for insurers, auditors and customers.

Serving Northampton

Cyber security for organisations in Northampton

We support organisations across Northampton, including Brackmills, Moulton Park and the town centre, along the A428 from our Bedford office. Our services extend beyond the office to warehouse PCs, scanners, shared devices and site-wide wireless networks.

IT support in Northampton

On-site attendance
Assessments, remediation and Cyber Essentials Plus testing
Remote management
Patching, scanning and protection managed centrally
Direct access
Experienced engineers, not a call centre

Questions

Frequently asked questions

What is the difference between Cyber Essentials and Cyber Essentials Plus?

Cyber Essentials is a verified self-assessment of five technical controls: firewalls, secure configuration, user access control, malware protection and security update management. Cyber Essentials Plus covers the same controls and adds hands-on technical testing of a sample of devices by an independent assessor. Under the requirements introduced in April 2026, devices that fail testing must be remediated and retested alongside a new sample, which makes thorough preparation essential.

How is automated patching managed without disrupting staff?

Updates are deployed to a pilot group first, then rolled out across the organisation outside working hours. Restarts are scheduled rather than forced, and any update that fails to install is flagged and remediated, keeping you within the 14-day window required by Cyber Essentials.

Are warehouse PCs and shared devices included?

Yes. Shared PCs, scanners and other networked devices fall within Cyber Essentials scope and are a common route for attackers. We include them in patching, scanning and protection, and configure them so that shift working does not rely on shared passwords.

Can you secure wireless networks across large sites?

Yes. We segment staff, guest and device networks, protect them with a centrally managed firewall and ensure older equipment does not become a weak point.

Arrange a cyber security review

We will assess your current position, identify priority risks and recommend a clear remediation plan, with no obligation. Available to organisations in Northampton and the surrounding area.