Plain-English IT Security Guides
Practical, jargon-free guides for small UK businesses, typically 1–50 staff. Each one links to the official NCSC, ICO and Cyber Essentials guidance it draws on.
What IT Policies Does a Small Business Need? A UK Guide
The core eight policies to start with, seven more as you grow, and how to make them stick.
Read the guide →How to Answer a Customer IT Security Questionnaire
What customers are really asking, a step-by-step approach, and how to answer honestly when something isn't in place yet.
Read the guide →Cyber Essentials Policy Requirements: What to Write Down
What the v3.3 requirements actually ask for, the scope traps, and which processes are worth documenting first.
Read the guide →Not Sure Where to Start?
Our free Cyber Essentials and IT policy readiness checklist takes about 15 minutes and shows where your gaps are, and which policy covers each one.
Our guides are general information, not legal advice or certification. Sound IT Policies is not affiliated with or endorsed by the NCSC, IASME or the ICO.