Skip to content

Meet Gyorgy. You deal with me directly.

I spent years running IT and security inside organisations. Now I help UK small businesses secure Microsoft 365 and pass Cyber Essentials Plus, and every job is done by me.

Practice and backgrounds

The work combines hands-on Microsoft 365 security with the operational context needed to keep the controls working after handover.

Results from in-house roles

Measured outcomes from running IT and security inside a business, before Magrathean.

What changed when I ran IT in-house
Intune device compliance
  • Before72%
  • After96%
Phishing and data-exposure incidents a day
  • Before25–30
  • After12
From my in-house IT roles before Magrathean, where I also took the organisation through Cyber Essentials Plus first time. Named references.

Working alongside your provider

Around half of UK businesses already use an external cyber security provider. The work fits beside them rather than replacing them.

48%of UK businesses use an external cyber security provider
With an external provider, by size
  • 44%Micro
  • 64%Small
  • 70%Medium
  • 42%Large
Source: Cyber Security Breaches Survey 2025/2026 (opens in a new tab), DSIT and Home Office, April 2026. UK businesses.

Every change gets a named owner

Few businesses give a board member responsibility for cyber security, so every change ends with a named owner.

Cyber security ownership in UK businesses
  • High priority for senior management72%
  • Board member responsible31%
  • Formal cyber security policy36%
  • Staff training in the last year19%
Source: Cyber Security Breaches Survey 2025/2026 (opens in a new tab), DSIT and Home Office, April 2026. UK businesses.

Not sure where to start?

If the tenant, device estate or evidence owner is unclear, the self-assessment gives the first useful signal.

Run the self-assessment

How the work stays useful

  1. 01

    Review the control

    Identity, endpoint, mail, collaboration or readiness evidence.

  2. 02

    Fix the priority

    Change what carries the most risk within the agreed access window.

  3. 03

    Leave a trail

    Document the change, owner, evidence source and next review.

Questions teams ask first

Do you work alongside an existing IT team or MSP?

Yes. The output is designed for the people who will own the controls after the specialist work ends.

Is the work limited to Microsoft 365?

Microsoft 365 is the centre of the practice, but identity, endpoint, networking, supplier access and operations shape whether those controls survive in practice.

Keep exploring