Secure Microsoft 365 for small private organisations.

Email, documents, passwords and devices on one well-protected platform, set up properly and kept secure. We bring the rigour of financial-services security to the scale of a family office, a small partnership, a trust or a small professional firm.

Who this is for

Small organisations that hold sensitive information and have outgrown personal accounts and email attachments, but do not have a security team.

You may recognise the starting point: office email on free personal accounts, documents shared as attachments, a mix of personal and work devices, and an accountant, adviser or insurer who is uncomfortable with it.

What changes for you

• Business email on your own domain, protected against phishing and impersonation. The business mail you choose is copied across; personal mail stays personal.
• One secure place for documents, so files stop travelling as email attachments. It works on Mac and Windows.
• Controlled sharing with outside advisers through a specialist secure file-sharing service, with sharing from Microsoft 365 switched off so nothing leaves by accident.
• A password manager for everyone, with shared vaults for the logins people use together.
• Phones and laptops protected in a way that respects personal use. Each person chooses a security level, and personal photos and messages stay private.
• An independent backup of email and files, held outside Microsoft, that we can restore from.
• Simple habits that stop fraud, including a call-back check before any payment details change, and practice phishing emails each quarter.
• Controls a finance professional will recognise: a record of who accessed what, protection for sensitive documents, and access removed the moment someone leaves.

How we work

The same four steps as everything we do.

Device security that respects personal use

People use the same phone and laptop for office and personal life, and that will continue. So each person picks one of three levels, each building on the one before.

Every person signs a one-page agreement setting out what the office can and cannot see or remove on their own devices.

Sharing with advisers, done deliberately

Sharing from SharePoint quickly becomes hard to track: links multiply and access is left open. We weigh up the options with you. Our usual recommendation is to keep files in Microsoft 365 and send anything shared outside through a specialist service, so every external share is deliberate and logged. We have run that approach ourselves, alongside Microsoft 365, in a regulated business.

Cyber Essentials

The setup is built to meet the Cyber Essentials requirements: supported and updated devices, malware protection, secure configuration, controlled admin access and multi-factor sign-in on every cloud service. We can prepare and submit the assessment; an independent certification body awards the certificate. We also help complete the security questionnaires that banks, insurers and custodians send. Insurance advice is for your broker; we give them clear evidence of the controls in place.

Why Wolf Rock Tech

• Independent. We do not resell licences and take no margin. You buy every subscription in your own name, so the platform recommendation is ours alone.
• Practitioner-led. The person who designs the setup builds and supports it.
• Plain English. You know what we are doing, why, and what it costs before we do it.
• Experience you can check. Six years running a Microsoft 365 estate of 400+ devices, including Intune, Defender and Purview; four consecutive Cyber Essentials Plus certifications; and a security tool stack covering data discovery, secure email and file sharing, awareness training and phishing simulation, and supplier due diligence. The detail is on Who we are.

How an engagement starts

We start with a short, fixed-fee discovery, then confirm the build estimate before you commit to it. Tools are bought directly from each supplier. We are happy to talk through the shape of an engagement on a short call.