Cyber Security for Businesses in Glasgow
Practical protection that stops the most common attacks, and a team watching for the rest.
Indigo Unified Communications provides managed cyber security for businesses across Glasgow and Scotland. Built on the Kaseya 365 security stack, our services include protection against viruses and ransomware on every device (endpoint detection and response), INKY email security against phishing, multi-factor authentication (a second check when people sign in), Microsoft 365 security and backup, staff training and vulnerability testing. On our Platinum and Charity packages, a dedicated security team watches for threats 24/7 (a security operations centre). We help clients achieve Cyber Essentials, and Indigo holds Cyber Essentials Plus and ISO 27001:2022.
Why cyber security matters for every business
In the last year, 43% of UK businesses reported a cyber breach or attack, rising to 65% of medium-sized businesses. Phishing was by far the most common, hitting 38% of businesses. Yet only 47% use two-factor authentication (Cyber Security Breaches Survey 2026).
Most attacks aren't sophisticated. They rely on a stolen password, a convincing email or a device that hasn't been updated. That's good news, because the fundamentals, applied consistently, stop most of them.
What's included in our cyber security
| Layer | What we do | Platform |
|---|---|---|
| Devices | Protection against viruses and ransomware on every laptop, desktop and server (endpoint detection and response), plus security updates and encryption | Kaseya 365 Endpoint · Datto RMM · Microsoft Intune |
| AI-based protection against phishing, malicious attachments, impersonation and invoice fraud, with warning banners on suspicious emails | INKY | |
| Identity | Multi-factor authentication, conditional access and a review of who can access what | Microsoft 365 / Entra ID |
| Data | Microsoft 365 backup and server backup, with tested recovery | Datto SaaS Protection |
| People | Security awareness training and simulated phishing, plus dark web monitoring for staff credentials (Gold and Platinum) | Training platform |
| Testing | Vulnerability scanning and testing to find weaknesses before attackers do | vPenTest |
| Network | Firewalls and secure remote access, with SASE (secure, managed connections between sites) for multi-site businesses | Cato Networks |
| 24/7 monitoring and response | A dedicated security team that watches for threats around the clock and responds to them (a security operations centre, on Platinum and Charity) | RocketCyber |
Cyber Essentials and Cyber Essentials Plus
Cyber Essentials is the UK government-backed certification covering five controls: firewalls, secure configuration, user access control, malware protection and software updates. It's required for central government contracts that handle personal data or OFFICIAL information (PPN 014, which replaced PPN 09/23 in February 2025), and it's increasingly requested by local authorities, housing associations and principal contractors. The NCSC reports that certified organisations are 92% less likely to make a cyber insurance claim.
What changed in April 2026: under version 3.3 of the requirements (from 27 April 2026), multi-factor authentication must be switched on for every cloud service that offers it, and critical or high-risk updates must be installed within 14 days. Missing either is now an automatic failure.
Indigo holds Cyber Essentials Plus itself, and we take clients through certification, done for you:
- Free readiness check against the five controls and the April 2026 rules
- Fix what would fail: usually multi-factor authentication, device management, unsupported software and admin rights
- Complete the self-assessment with you. We draft the answers and your director reviews and approves them
- Certification by our partner Citation, including the Cyber Essentials Plus technical audit
- Stay certified, with the controls kept in place all year and renewal every 12 months
Cyber Essentials support is included in our Platinum package, and any business can buy it separately, whether or not we're your IT provider. Cyber Essentials, done for you → · Take the free readiness check →
Cyber security for your sector
- Construction: invoice fraud and payment diversion, tender requirements and protecting drawings. Construction →
- Renewable energy: supply chain security demands from developers and utilities, and keeping office IT separate from site systems. Renewable energy →
- Leisure and entertainment: protecting card payments and customer data, with tills on their own network. Leisure and entertainment →
- Charities: protecting beneficiary and donor data. 28% of charities reported a breach or attack last year. Charities →
Why businesses trust Indigo with their security
- Cyber Essentials Plus and ISO 27001:2022 certified. We hold ourselves to the standard we help clients reach
- Microsoft Solutions Partner for Modern Work and Kaseya Platinum Partner
- An experienced engineering team across three support lines, and a first response to every ticket in under 30 minutes
- 2,000+ endpoints protected
- Founded in 2018, working from Glasgow Business Park and Livingston
Frequently asked questions
What's the difference between antivirus and EDR?
Traditional antivirus looks for known threats. Endpoint detection and response (EDR) also watches how programs behave, so it can spot and stop new or disguised attacks such as ransomware, and it records what happened for investigation. Indigo installs EDR (Kaseya 365 Endpoint) on every managed device.
What is a security operations centre (SOC)?
A security operations centre (SOC) is a team that monitors your systems for signs of attack 24 hours a day and responds when something suspicious happens, for example by isolating an infected laptop. Most small and medium businesses can't staff one themselves. Indigo's Platinum and Charity packages include a 24/7 SOC (RocketCyber), which spots and responds to threats for you (managed detection and response).
How long does it take to get Cyber Essentials?
For a well-managed business, Cyber Essentials can often be achieved within a few weeks. The time depends mostly on how much needs fixing first, usually multi-factor authentication, unsupported software and admin rights. Cyber Essentials Plus adds an independent technical audit, which must be completed within three months of the basic certificate (IASME).
Can we get Cyber Essentials help without switching IT provider?
Yes. Indigo offers Cyber Essentials and Cyber Essentials Plus support as a standalone service, and we recommend it for any business that bids for public sector or large-company work. We review your setup against the five controls, fix the gaps, and prepare the submission and audit, working alongside your current IT provider if you have one.
What should we do if we think we've been hacked?
Disconnect the affected device from the network, but don't switch it off. Then call your IT provider straight away, and change passwords from a different, clean device. If money or personal data may be involved, contact your bank immediately and consider whether you need to report it to the Information Commissioner's Office (ICO) within 72 hours. Indigo clients should call 0141 442 0202.
Is cyber security included in your managed IT support?
Yes. Every managed IT package includes endpoint protection, INKY email security, patching, Microsoft 365 security settings and backup. Gold adds 24/7 monitoring, dark web monitoring and security training. Platinum adds a 24/7 security operations centre, annual audits and Cyber Essentials support. See our IT support packages →
Book a free security review
We'll check your devices, email, Microsoft 365, backups and user access against the Cyber Essentials controls, and give you a short, prioritised list of what to fix first.