# Cyber security insights for London businesses

> Short, useful answers for London business owners and IT leads, with sources.

Canonical: https://cybersecuritylondon.com/insights


- [How to choose a cyber security company in London.](https://cybersecuritylondon.com/cyber-security-company-london): Choose a cyber security company that starts by understanding your business, explains its findings in plain English, gives fixed quotes after scoping, and can show relevant experience.
- [Information security for small businesses: where to start.](https://cybersecuritylondon.com/business-information-security): Start with the basics that stop most attacks: back up your data, keep devices and software updated, turn on multi-factor authentication, use strong unique passwords, train staff to spot phishing and limit admin rights.
- [What is a managed SOC? SOC vs MDR vs EDR.](https://cybersecuritylondon.com/what-is-a-managed-soc): A managed SOC (security operations centre) is an outsourced team that monitors your systems around the clock and responds to threats.
- [Cyber security glossary, in plain English.](https://cybersecuritylondon.com/cyber-security-glossary): Cyber security is full of jargon.
- [How much does ISO 27001 cost in the UK?](https://cybersecuritylondon.com/how-much-does-iso-27001-cost): The cost of ISO 27001 has three parts: the work to build your information security management system, the certification body's audits, and your own team's time.
- [How much does Cyber Essentials cost?](https://cybersecuritylondon.com/how-much-does-cyber-essentials-cost): Cyber Essentials has a fixed assessment fee set by IASME, the scheme's delivery partner, which rises with the size of your organisation.
- [ISO 27001 vs Cyber Essentials.](https://cybersecuritylondon.com/iso-27001-vs-cyber-essentials): Cyber Essentials certifies five basic technical controls and suits almost every UK business as a first step.
- [What is network penetration testing?](https://cybersecuritylondon.com/what-is-network-penetration-testing): Network penetration testing is an authorised, simulated attack on your network by a skilled tester.
- [How much does a penetration test cost in the UK?](https://cybersecuritylondon.com/how-much-does-a-pen-test-cost-in-uk): The cost of a penetration test in the UK depends mainly on how much is being tested and how deeply.
- [Vulnerability scan vs penetration test.](https://cybersecuritylondon.com/vulnerability-scan-vs-penetration-test): A vulnerability scan is an automated check that lists known weaknesses across your systems, and it should run regularly.
- [Cyber Essentials vs Cyber Essentials Plus.](https://cybersecuritylondon.com/cyber-essentials-vs-cyber-essentials-plus): Cyber Essentials and Cyber Essentials Plus cover the same five technical controls.
- [Who needs SOC 2? And what about ISO 27001?](https://cybersecuritylondon.com/who-needs-soc2-compliance): SOC 2 is a US attestation report, most often requested by American customers of software and service companies.
- [What to do after a cyber attack.](https://cybersecuritylondon.com/what-to-do-after-a-cyber-attack): After a cyber attack, act quickly but calmly.