!
First 10 minutes
Clicked a phishing link
Stop, preserve evidence, report, reset access and check for follow-up risk.
Cyber readiness for small organisations
When cyber goes wrong, here’s what to do next.
Free cyber drills, Daily Int Briefs, vulnerability briefs, templates, training and practical guidance for small businesses, charities and community groups without a dedicated cyber security team.
Actions On
View all drills
Immediate cyber response drills
Plain-English playbooks for the first few minutes of a cyber incident.
@
Account takeover
Email account hacked
Lock down the account, check forwarding rules and recover safely.
£
Payment fraud
Fake invoice received
A verification drill for finance, admin teams, trustees and owners.
3P
Supplier risk
Supplier breach
What to ask, what to record and how to decide whether you are exposed.
Daily Int Brief
A daily cyber intelligence brief for organisations without a security team.
The Daily Int Brief will cover wider cyber issues such as scams, phishing trends, ransomware, government alerts, supplier risk and practical business actions.
Read the briefing formatEvery issue will include:
Situation
What is happening and why it matters.
Action
What to check and what to do now.
Provider question
One question to ask your IT provider.
Vulnerability Brief
Plain-English vulnerability updates when something is worth acting on.
The Daily Vulnerability Brief translates actively exploited, widely reported or small-business-relevant vulnerabilities into simple action. It explains what is being reported, whether it could affect a small organisation, and what to ask your IT provider.
View Vulnerability BriefsEach vulnerability brief includes:
Plain English
What the vulnerability means without technical jargon.
Impact
Whether a small business, charity or community group is likely to be affected.
Action
What to check, what to patch, and what to ask your IT provider.
Field Manual
Open Field Manual
Free templates, policies and checklists.
Practical starting points for organisations that need structure but cannot afford enterprise-level cyber documentation.
Incident Response Plan
A simple plan for who does what when something goes wrong.
AI Acceptable Use Policy
Clear rules for safe use of AI tools at work.
Supplier Questionnaire
Questions to ask suppliers before trusting them with systems or data.
Cyber Basic Training
Ready-made cyber awareness training for small organisations.
View trainingReadiness Review
A fixed-scope review covering email, MFA, backups, admin access, devices, suppliers and incident response.
View consultancyTalk to Actions On Cyber
Email hello@actionsoncyber.com for training, readiness reviews or consultancy support.
Email nowJoin the Actions On Cyber briefings.
Get plain-English cyber updates, practical actions and guidance you can share with your team.