What are the opening hours?

Monday 8:30am - 5:30pm Tuesday 8:30am - 5:30pm Wednesday 8:30am - 5:30pm Thursday 8:30am - 5:30pm Friday 8:30am - 5:30pm

Croft MSP

Keeping your team connected with bespoke managed service solutions. At the heart of Croft is an ambitious, and solution-driven team.

Established in 2006, Croft is a B2B telecommunications and managed IT provider, supplying innovative communication and IT services across the UK. Croft currently offers a comprehensive range of fully managed services including business mobiles, connectivity, hosted telephony, business phones, IT services, and cyber protection. Supporting and driving the development of this team, we partner with a range of best-in-class providers to offer customers leading technology and increase their own productivity. We love to chat, so feel free to give us a call and find out more about how we can help you.

29/10/2026

Your lift alarm is probably running on a phone line.

In a lot of buildings, so is the fire alarm monitoring. Same for door entry systems, CCTV and card payment terminals. Nobody thinks of these as telephony, so they rarely make it onto the migration list, and they all stop working when the PSTN is switched off on 31 January 2027.

Businesses tend to find this out partway through the move, by which point the fix costs more. With fire and lift systems there's a compliance problem to sort out as well.

Start with an audit of every line you hold and what's sitting on each one. Once you know the full picture, complex sites can still take months to migrate, so it's worth doing that audit early.

Our dedicated PSTN Switch-Off page and eGuide outlines our proactive approach to migrating your telephony services.

Download the eGuide for practical advice https://www.croftmsp.com/download/pstn-switch-off/

If you haven't mapped your PSTN dependencies yet, contact us and our communications team will go through it with you.

28/10/2026

Stephanie Keinz, Senior Cyber Threat Intelligence Analyst at LastPass, shared some numbers on supply chain attacks during our recent webinar. Half of breaches involve a third party, and supply chain breaches have risen 60% in a year.

Think about your payroll software, or whoever looks after your website. Both will have some access to your systems. You’re probably a supplier to someone else as well.

Stephanie described a supplier as the trusted vendor with the keys. When one is compromised, attackers can reach many of the customers that supplier works with.

It’s worth listing which suppliers can get into which systems, then asking each of them how they handle security. Cyber Essentials certification is useful for both you and your suppliers here, and public sector contracts increasingly ask for it.

Our write-up of the session is in the comments, along with details of our complimentary Cyber Security Discovery Session.

If you’d like a clearer picture of where your business is exposed, it’s worth a conversation.

Read the write-up from our session with LastPass here: https://www.croftmsp.com/article/inside-the-evolving-cyber-threat-landscape/

To find out where your business is exposed and what to fix first, book a complimentary https://www.croftmsp.com/cyber-security-discovery-session/

27/10/2026

Cyber security comes with a lot of acronyms. SIEM, EDR, MDR and plenty more. For most business owners, the jargon alone is enough to stop them looking into it properly.

Picture your business as a house instead.

A rusty lock on the front door will put off the odd opportunist. Someone who really wants to get in will barely slow down.

Add an alarm and window locks and you’re in better shape, though you still wouldn’t call it secure.

Properly secure means motion sensors and CCTV, with someone watching the feeds around the clock and ready to act the moment something looks off.

Cyber protection works on the same principle. Each layer backs up the one before it, so if someone does try to get in, they’re picked up early and dealt with before they can do any real damage.

Cybercrime and significant cyber attacks cost the UK approximately £14.7 billion per year. If you’d like to know where your business stands, we’re happy to talk it through.

22/10/2026

The heads of the Five Eyes cyber security agencies, including the NCSC, published a joint statement on AI and cyber risk for business leaders.

Their concern is that AI is helping attackers find and use weaknesses faster, which shortens the time between a vulnerability being discovered and being exploited. They expect the effects to show within months.

Their advice for organisations is practical, and most of it will be familiar to a good IT team:

Cut back unnecessary access and systems exposed to the internet
Get security updates out faster
Deal with unsupported legacy systems
Review who can reach critical systems, and use strong authentication

Test your incident response plan before you need it

The agencies say success comes from getting the basics right and acting quickly. That matches what we see day to day with our clients.

Read the full article: https://www.ncsc.gov.uk/news/the-ai-shift-in-cyber-risk-why-leaders-must-act-now

If you’d like to check your business against the list, we’re happy to talk it through.

21/10/2026

Fourway, a UK-based infrastructure specialist, wanted to bid for larger and more complex contracts. To do that, they needed Cyber Essentials Plus.

Their IT had grown over many years into a mix of services, legacy infrastructure and specialist engineering software, used by people who each needed different levels of access. Bringing it up to standard had to be done carefully so the engineering side of the business kept running, and so the setup could grow with them.

We worked with Fourway for two years to simplify and standardise their IT. We moved them off ageing on-premise kit, put the right services in the cloud, tightened up endpoint management and improved how patches get rolled out. Their team now has a far clearer view of their environment and much more control over it.

Fourway is now Cyber Essentials Plus certified. They can meet their clients’ requirements and go after the bigger contracts they were aiming for.

20/10/2026

At the end of our recent webinar with LastPass, someone asked about the shared spreadsheet their team uses to store logins.

Michael Kosak, LastPass’s Director of Threat Intelligence and Response, said attackers who get inside a network will look for stored passwords before anything else. A spreadsheet makes that very easy for them.

Plenty of businesses still work this way.

Almost 2 billion credentials were harvested in the first six months of this year. Info-stealer malware, one of the tools Michael talked about, goes straight for passwords saved in browsers.

His suggestion was a business password manager, which is easier to use than a spreadsheet anyway. Sharing is built into LastPass, so nobody needs the spreadsheet. Its dark web monitoring also flags exposed credentials, so they can be changed before they’re used.

We’ve written up the main points from the session, including the four controls Stephanie Keinz recommends. The link is in the comments.

If your team is still sharing passwords this way, we’re happy to talk it through.

15/10/2026

KnowBe4 studied more than 11.9 million users over twelve months. Before training, 34.3% of them clicked a phishing link or opened a malicious attachment. That fell to 18.9% within 90 days of starting simulated phishing and training, and to an average of 4.6% by the end of the year.

We help you run security awareness training with KnowBe4. This starts by sending your employees a simulated phishing email to get a baseline for your organisation. Training is then based on how each person did, and testing continues through the year.

You'll get reports on both training and phishing results.

If that sounds useful, we’d be happy to show you how it works. Find out more about security awareness training: https://www.croftmsp.com/solutions/managed-it/cyber-security/security-awareness-training/

14/10/2026

A staggering 98% of UK higher education institutions identified a cyber breach or attack in the past 12 months, according to the government’s Cyber Security Breaches Survey 2026. The figure was 88% for further education colleges, 73% for secondary schools (up from 60% the year before) and 49% for primary schools.

When ransomware is involved, it can encrypt student records and finance files, along with any backups stored on the same network.

A cloud-first backup keeps copies of your data separate from the school’s systems, so they can still be restored after an attack. We’ve written about how this works in education.

Read the full article: https://www.croftmsp.com/article/why-cloud-back-up-is-vital-in-education/

13/10/2026

The PSTN conversation recently has been centred around what stops working in January 2027, and not much about your business ending up better off.

Let's dive into a few other things that change once you are off PSTN:
✔️ Work from anywhere.
✔️ Lower and more predictable costs.
✔️ Easy to scale.
✔️ Better features as standard.
✔️ Resilience and business continuity.

BT warning to late movers is that those who leave it to the final months risk avoidable disruption and cost, and it has confirmed tiered price increases already and will continue to rise on legacy products in the final stretch. There are also hidden dependencies. BT’s own concern is the lines businesses forget about: the alarm, the lift phone, the card machine...ensure you check these.

There are currently 1.5 million lines still running on legacy copper at the six-month mark, including roughly 350,000 business premises.

Our eGuide covers how to plan the move and what to check first. Grab your guide: https://www.croftmsp.com/download/pstn-switch-off/

09/10/2026

Congratulations to our September Value Award winners: Eileen Caswell, Dave Ambridge, Kevin Bhaskaran, Jess Morrell, Edit Piller, Ben Lindsay and Andrew Wilson.

Their colleagues nominated them for making sure our clients get the best possible experience to getting an engineer to a school within the hour.

Well done to all seven, and thank you.

𝗘𝗶𝗹𝗲𝗲𝗻 𝗖𝗮𝘀𝘄𝗲𝗹𝗹
There exists no customer so peeved that Eileen can't make them smile. Again and again she rescues potential client issues from escalating and talking to her is normally the best part of the day. An absolutely invaluable colleague and lovely person

𝗗𝗮𝘃𝗲 𝗔𝗺𝗯𝗿𝗶𝗱𝗴𝗲
Since joining Finance in January 2025, Dave has helped shape the Revenue Assurance function, working with suppliers to secure credits for Croft and finding further ways to recover costs and protect revenue. He has also supported the transition of UCC cease activities, sharing his knowledge to build colleagues’ confidence, and his positive attitude has made a real difference to the team and the wider business.

𝗞𝗲𝘃𝗶𝗻 𝗕𝗵𝗮𝘀𝗸𝗮𝗿𝗮𝗻
Kevin consistently embodies Croft's value and goes above and beyond to ensure the client has the best possible experience. He is a pleasure to deal with on a daily basis and nothing is ever too much trouble.

𝗝𝗲𝘀𝘀 𝗠𝗼𝗿𝗿𝗲𝗹𝗹
When a school’s system went down on 28 August and needed a site visit, Jess had an engineer there within the hour and the issue was resolved, and she’s a pleasure to work with.

𝗘𝗱𝗶𝘁 𝗣𝗶𝗹𝗹𝗲𝗿
Edit managed all the education summer projects, overcame the challenges along the way, and kept the customer at the heart of everything she did, with nothing ever too much trouble.

𝗕𝗲𝗻 𝗟𝗶𝗻𝗱𝘀𝗮𝘆
Ben’s recent promotion reflects the values he shows every day, with consistently positive customer feedback and exceptional attention to detail.

𝗔𝗻𝗱𝗿𝗲𝘄 𝗪𝗶𝗹𝘀𝗼𝗻
Andy is always ready with his tool bag to move, assemble or dismantle furniture in the Preston office, and nothing is ever too much trouble.

Address

Foxhole Business Park, John Tate Road
Hertford
SG137NN

Opening Hours

Monday	8:30am - 5:30pm
Tuesday	8:30am - 5:30pm
Wednesday	8:30am - 5:30pm
Thursday	8:30am - 5:30pm
Friday	8:30am - 5:30pm

Website

https://www.croftmsp.com/

Alerts

Be the first to know and let us send you an email when Croft MSP posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.