Cyber Security in Windsor

What is different about networks & security in Windsor

Corporate offices across Windsor, Slough and Maidenhead are usually well defended at the perimeter and much weaker on what happens inside a building they share. A multi-tenanted office means shared risers, shared contractors and sometimes shared infrastructure, and a network that assumes everything inside the building is trustworthy has made an assumption the landlord cannot support.

The other pattern at this end of the Thames Valley is a UK office of a larger group, following a security policy written elsewhere and not always suited to the local reality. Where that happens, the useful work is translating the policy into what the building and the local team can actually operate, rather than pretending compliance with something nobody follows.

Cyber Essentials can provide the UK office with a clear local baseline beneath the group policy. Microsoft 365 identity and device settings, Check Point network controls and EDR coverage are mapped to the five requirements, with Cyber Essentials Plus available where customers or the parent group want independent technical verification.

Questions we get asked in Windsor

We share a building with other tenants. What does that change?

It removes the assumption that being inside the building means being trusted. Shared risers and shared contractors mean your network should treat the building as an untrusted space, which mostly comes down to what your equipment is plugged into and whether a socket in a shared area reaches anything that matters.

Our group policy was written abroad and does not fit our office. How do we handle that?

By translating it rather than ignoring it or pretending. Most group policies express an outcome that can be met more than one way, and the useful exercise is documenting how this office achieves it given the building and the team you actually have. A policy nobody follows is worse than one adapted deliberately and written down.

Can the UK office certify to Cyber Essentials independently?

Potentially, if the scope and shared group services are defined accurately. We map the five controls across Microsoft 365, endpoints and Check Point network policy, identify dependencies on the parent organisation and prepare the evidence. An IASME-licensed Certification Body makes the assessment decision.