ITC Systems / IT support in Cambridge / Cyber security
ITC Systems provides managed cyber security for small and medium-sized organisations. We identify and remediate vulnerabilities, automate patch management across every device and support you through Cyber Essentials and Cyber Essentials Plus certification. As a Sophos Partner, we deliver and manage enterprise-grade endpoint, firewall and email protection.
Managed cyber security
Security incident response
Suspect a security incident? Contact us immediately.
Our engineers can begin containment remotely. Incident support is available to non-clients.
Our services
A layered approach combining continuous vulnerability management, automated patching and proven Sophos protection, aligned to the Cyber Essentials standard and managed by one accountable team.
Scheduled scanning of every device and your internet-facing systems, with findings prioritised by real-world risk so the most serious exposures are remediated first.
Windows, macOS and everyday business apps updated automatically, tested on a small group first and installed outside working hours.
A gap assessment against the current requirements, remediation of any shortfalls and support completing your self-assessment with an accredited certification body.
Devices prepared and verified ahead of the independent technical audit, maximising the likelihood of passing first time and avoiding a retest.
As a Sophos Partner, we deploy and manage Sophos protection on every device, with optional 24/7 managed detection and response.
Advanced filtering that blocks malicious email before delivery, supported by simulated phishing and training so staff can recognise attempts that evade it.
Multi-factor authentication on every account, conditional access in Entra ID and Microsoft 365 settings hardened against account takeover.
Sophos firewalls configured, monitored and kept up to date, with secure remote access and separate networks for guests and devices.
Immutable, offsite backups that cannot be encrypted or deleted by attackers, tested regularly to ensure rapid recovery.
Patching and update management
Most successful attacks exploit known vulnerabilities for which a fix was already available. Our management platform automates patching across every device we manage and continuously scans for remaining exposures, so known vulnerabilities are remediated within days rather than months.
Example monthly security report
A clear monthly summary of your security position.
Cyber Essentials and Cyber Essentials Plus
Cyber Essentials is the UK government-backed certification scheme demonstrating that essential security controls are in place. It is increasingly required by customers, insurers and public sector buyers. We support you from initial gap assessment through to certification and ongoing compliance.
Your devices, accounts and cloud services are reviewed against the current requirements, with every gap documented.
We address each finding, including MFA, patching, firewall rules, administrative rights and unsupported software.
We support your self-assessment with an accredited certification body and prepare devices for Cyber Essentials Plus testing.
Automated patching and monthly reviews maintain compliance throughout the year and simplify renewal.
What changed in April 2026
The standard is now stricter. We will ensure you are ready.
Why ITC Systems
We deploy and manage Sophos endpoint, firewall and email protection, with 24/7 managed detection and response available.
IT support and security are delivered by the same team, removing gaps between suppliers.
Monthly reports detail patch status, identified vulnerabilities and remediation, providing evidence for insurers, auditors and customers.
Serving Cambridge
We support organisations across Cambridge, the Science Park and the surrounding villages, many of which handle research, intellectual property and sensitive client data. Our services help you demonstrate robust security to clients and partners, including through Cyber Essentials Plus and as a foundation for ISO 27001.
Questions
Cyber Essentials is a verified self-assessment of five technical controls: firewalls, secure configuration, user access control, malware protection and security update management. Cyber Essentials Plus covers the same controls and adds hands-on technical testing of a sample of devices by an independent assessor. Under the requirements introduced in April 2026, devices that fail testing must be remediated and retested alongside a new sample, which makes thorough preparation essential.
Updates are deployed to a pilot group first, then rolled out across the organisation outside working hours. Restarts are scheduled rather than forced, and any update that fails to install is flagged and remediated, keeping you within the 14-day window required by Cyber Essentials.
Yes. We help you answer questionnaires accurately and supply the supporting evidence, from patch compliance reports to MFA coverage. Cyber Essentials Plus often satisfies much of what clients are looking for and provides a sound foundation for ISO 27001.
Alongside the core controls, we restrict access to sensitive data in Microsoft 365, protect every device with Sophos and maintain immutable backups so that data cannot be held to ransom.
We will assess your current position, identify priority risks and recommend a clear remediation plan, with no obligation. Available to organisations in Cambridge and the surrounding area.