Skip to main content
Fleur Lamont Logo Fleur Lamont

The Guided Session

Ninety minutes, on-site or remote, with the ten checks filled in by the end of the session.

Most firms already know the advice. What they don't have is the time to do it, and the person who would do it is the one serving customers. This is that ninety minutes, out of the way, with the page finished at the end.

What happens

I come to you, or we do it on a call. We work through the ten checks on the one-page guide, on your kit, and write down what is actually true for your business. If your card machine stops tomorrow morning, the answers are on one sheet of paper instead of in someone's head.

What you get

  • The ten checks completed for your firm, on one page. That page is what you take away, and what you file.
  • Your firm's cadence: the first 4 hours, the first 24 hours, and the first week, mapped to the official restoration timeline, written for your kit, your stock and your staff.
  • A dated session record, two or three pages: what we checked, what we found, what we fixed in the room, and what we could not fix, so none of it gets lost.
  • The three things to do next, each with an owner and a date, so the session does not end as a good conversation.
  • A backup restore to run yourself after the session, with the steps written down, so you know it works rather than hoping it would.
  • A written list of who to ring, what pauses, and what customers are told.
  • The money documents, meaning your customer list, open invoices, key contracts and supplier contacts, copied onto a device you control.

Who this is for

Owner-run firms in the North East: a shop, a trade, a small professional practice, or the office of a bigger operation where the decisions still sit with one or two people. Anyone whose takings stop the moment the till or the email does.

This is rung two of four. The rung below it is the free guide, if you want to do the ten checks yourself. The rung above it is Risk Discovery (£950, a full day) if you have one IT person or an MSP who can answer the questions, and the one above that is the Technology Risk Framework (£1,900) if you have a firm with an IT team and a board that asks.

Who this is not for

  • Firms that already have a business continuity function.
  • Anyone after a security audit or a penetration test. This is continuity, not a review of your defences.
  • Firms that want a long report. You get one page and a short record, and that is the point.

Price

£450 for the ninety minutes, payable after the session. No subscription and no retainer. On-site (North East) or remote.

Ask about a Guided Session

Want it, or want to ask whether it applies to your business? Send a line.

Ready for the wider picture? Risk Discovery is the next rung up: a full day at £950, a written assessment of your technology risk, and a walkthrough at the end of it.

Above that sits the Technology Risk Framework: £1,900, the same framework worked through for your organisation, with the findings ranked and walked through.

The framework behind all of it is the European Technology Risk Assessment, the free ebook, free to download.

Common questions

Is this the same as the free guide? The guide is free and stays free. This is me doing it with you.

What if we have IT staff, or an MSP? Then you may want Risk Discovery instead: a full day, £950, where the questions get asked and answered by the people who know your systems and I translate the answers into risk. The Technology Risk Framework (£1,900) is the deeper version of that, for a firm with a real IT team.

Do you need access to our systems? Only what you choose to show me. I don't take copies of your data away, apart from the money documents you ask me to put on your own device.

What if we have no backups at all? Then that is the first thing we write down, and often the first thing you fix.

Is this anything to do with insurance? Not directly. I do not sell insurance and I am not a broker. But the checks here are close to the ones an insurer asks about when a firm claims. The UK's cyber security centre is clear that if you tell an insurer a control is in place when it is not, the insurer may not be obliged to pay. So a backup you have actually restored, and two-factor on the accounts that matter, are worth doing before anyone needs to claim rather than after.