Knowall I.T.

09/09/2026

Do You Know What Immutable Backups Are?

Standard backups purge deleted files after a set retention window (typically 28–90 days). Immutable backups remove that risk entirely — deleted files are never automatically purged, so you always have a clean copy to restore from if an account is compromised or data is wiped by ransomware. The trade-off is storage cost, which is why it pays to review what's actually worth making immutable rather than backing up everything by default.

https://www.knowall.net/blog/immutable-backups-your-last-line-of-defence-against-data-loss/

TL;DR: Immutable backups stop deleted files from ever being purged, giving you a true last line of defence against data loss. Immutable backups keep deleted files indefinitely instead of removing them after the standard 28-day retention window They protect against…

05/08/2026

Free Cyber Essentials audit — no strings.
Most CE certificates we check don't hold up. Missing MFA. Patching weeks behind. Unsupported systems still running.

The certificate says you're compliant. The environment says otherwise — and after a breach, that gap is what your insurer and your clients will be looking at.

We'll take a surface look at your setup and tell you fairly quickly if there's a problem. No obligation.

https://www.knowall.net/blog/free-cyber-essentials-audit-is-your-certificate-hiding-a-compliance-gap/

TL;DR: A Cyber Essentials certificate means nothing if the controls behind it aren’t real. We regularly audit new clients who hold valid Cyber Essentials certificates but whose environments fall well short of the actual requirements. Certification is a point-in-time assessment…

26/06/2026

New client, new start. We'll let the photos do the talking on this one.

If your server room needs some love, you know where we are.

London-based IT support — knowall.net

17/06/2026

Is there one platform that can manage all your compliance and cyber risk?

Most businesses are managing compliance across spreadsheets, disconnected tools, and folders nobody opens — and finding out the hard way that it's not enough when a regulator, insurer, or enterprise client starts asking questions.

In our latest blog we cover:

✅ Why compliance feels so hard to manage — and why it doesn't have to
✅ What a governed compliance platform actually does differently
✅ How one platform can cover ISO 27001, Cyber Essentials and DCC simultaneously
✅ Why you don't need a dedicated compliance team to run it
✅ How to see your real cyber exposure before a breach — not during one

https://www.knowall.net/blog/is-there-one-platform-that-can-manage-all-your-compliance-and-cyber-risk/

TL;DR: Yes — one platform can manage your compliance and cyber risk. Here’s what to look for. Most businesses manage compliance across scattered spreadsheets, disconnected tools, and folders nobody opens — there’s a better way. A single governed platform brings…

05/06/2026

Most policy failures aren't about the policy. They're about who owns it the moment something goes wrong.

https://www.knowall.net/blog/how-to-handle-a-security-incident-policies-roles-and-responsibilities/

TL;DR: Most policy failures aren’t about the policy — they’re about who owns it the moment something goes wrong. 43% of UK businesses reported a breach or attack last year, yet only around a quarter have a formal incident response…

18/05/2026

DCC obligations don’t stop at the MOD’s direct suppliers — they flow downstream.

A client calls and asks whether you hold Cyber Essentials certification. Or a tender arrives with a new section on cyber security requirements that wasn’t there last year. Or a long-standing contract comes up for renewal and suddenly there’s a questionnaire about your information security policies. If any of this sounds familiar, you’re not imagining it — and it’s not a coincidence. It’s the MOD’s new Defence Cyber Certification framework making its way through the supply chain, and it’s heading in your direction.

https://www.knowall.net/blog/you-dont-supply-the-mod-so-why-are-your-clients-asking-about-your-cyber-security/

TL;DR: DCC obligations don’t stop at the MOD’s direct suppliers — they flow downstream. Tier 1 MOD contractors are now required to assess and manage cyber risk in their own supply chains. That means IT providers, software vendors, and managed…

11/05/2026

The MOD has changed the rules on cyber security — and it may affect your business even if you don't work directly with the MOD.

Defence Cyber Certification (DCC) Level 0 is now mandatory for MOD suppliers — and under the new Def Stan 05-138 Issue 4, the scope doesn't stop at direct contractors. It flows downstream through the entire supply chain.

That means if you supply to, or support, a business that holds an MOD contract — you could already be in scope without knowing it.

https://www.knowall.net/blog/defence-cyber-certification-dcc-are-you-meeting-mods-new-cyber-security-standards/

Stan05138

TL;DR: The MOD is raising the bar on cyber security — and it affects your business too. Defence Cyber Certification (DCC) Level 0 is now mandatory for all MOD suppliers. The new Def Stan 05-138 Issue 4 extends the scope…

06/05/2026

Want to work with the NHS? Cyber Essentials is no longer optional.

The NHS is one of the largest buyers of technology in the UK. For health tech companies, software developers, IT service providers, and managed service providers, winning NHS contracts is a huge opportunity — but getting through the door requires more than a good product. It requires proof that your organisation and your technology meet some very specific cybersecurity and data protection standards. If you haven’t heard of DTAC or DSPT yet, you need to.

https://www.knowall.net/blog/cyber-essentials-for-nhs-suppliers-what-you-need-to-know-in-2026/

TL;DR: Want to work with the NHS? Cyber Essentials is no longer optional. Any company supplying digital tech or services to the NHS must pass through a set of cybersecurity and compliance frameworks — CE, DSPT, and DTAC. Cyber Essentials…

28/04/2026

Most call centres store thousands of hours of recordings. Almost none of it gets reviewed.

AI changes this. Every call becomes structured, searchable data automatically. Sentiment, compliance flags, and customer issues are surfaced without anyone listening back. Managers act on insight instead of guesswork. Agents spend less time on notes and more time helping customers.

The data was always there. AI just makes it usable.

https://www.knowall.net/blog/how-ai-is-transforming-call-centre-operations-from-recordings-to-real-time-intelligence/

TL;DR: AI turns every call into structured intelligence — automatically. AI transcription converts every call into searchable, structured data in real time Sentiment analysis and compliance flagging replace hours of manual call reviewing Managers shift from listening to recordings to…

14/04/2026

Six reasons Cyber Essentials is good for business – not just security

Most conversations about Cyber Essentials focus on the security angle — and rightly so. But for many of the businesses we work with, the certification delivers just as much value outside the IT department. From winning contracts to cutting insurance friction, here are six reasons UK businesses are making Cyber Essentials a commercial priority — not just a security one.

https://www.knowall.net/blog/six-reasons-cyber-essentials-is-good-for-business-not-just-security/

TL;DR: Cyber Essentials isn’t just about security — it’s a smart business move Certification builds client trust and strengthens your professional credibility It unlocks public sector and enterprise contracts that require or prefer it Better IT hygiene means fewer incidents,…