What a small business AI and security review should cover
A practical guide to the first areas a small business should check when AI tools, staff accounts, email security and suppliers all overlap.
4 min read
SMALL BUSINESS / HORSHAM
Small Business AI & Security Review
For small teams using AI and cloud tools without a clear picture of how everything connects. We look at the agreed tools, staff access, email and backup arrangements together, then turn observations and unknowns into a short, useful action plan. This is practical technology advice, not just a cyber audit.
From £595
Not VAT registered. No VAT is charged.
What we can review
We select the useful checks together. The quote names the devices and accounts covered, rather than promising to inspect every device or account.
- AI tool usage and data-handling review
- Staff account and access review
- Email and domain security check (SPF, DKIM, DMARC)
- Backup and recovery posture review
- Basic incident response guidance
- Written report with prioritised recommendations
- Optional: ServiceSignal assessment follow-on
A defined job, not open-ended support
- Penetration testing, intrusive vulnerability scanning or incident investigation
- Cyber Essentials certification, legal/compliance sign-off or a guarantee of security
- Reading private staff/customer content, reviewing every system or unlimited supplier access
- Ongoing monitoring, managed IT, AI implementation or a ServiceSignal subscription
Your fixed quote confirms the devices and accounts covered, deliverables and any travel costs before work begins. Additional work is agreed separately, with no unexpected charges. Separately agreed additional work is £75/hour.
Review packages use a 20% deposit, followed by an invoice for the balance on 14-day payment terms. Your quote confirms the amounts, payment dates and cancellation arrangements before you book. No payment is collected through this website.
THE PROCESS
Understand the job before the visit.
Scoping calls are available by phone or video. We will agree a date and time that works for you.
Enquiry
Tell me what you want to improve and your town if a visit may be needed. We arrange a call by email.
Scoping Call
For review packages, an initial 30-minute call to understand your priorities, the likely scope and whether remote work or a local visit makes sense.
Preparation
A short questionnaire gathers the device counts, providers and practical constraints needed to understand the job. No passwords or sensitive account content.
Agreed Quote
You receive a fixed quote covering the agreed devices, accounts, deliverables, timing and any travel costs. You approve it before work or a visit is booked.
The Review
The agreed work happens remotely or during a local visit where needed. You stay in control of your accounts; changes outside scope need your approval.
Report & Follow-up
Review packages include a plain English written report within 5 working days of the review and a follow-up call to work through priorities.
A little preparation, a clearer quote
After the scoping call, I send a short questionnaire about your priorities, devices and providers. Unknown answers are fine. Never send passwords, recovery codes, children's personal details or private account content.
- Your business priorities, approximate team size and a named decision-maker
- AI tools, email/file providers and important systems by name; unknowns are fine
- Approximate account counts, supplier roles and who can authorise each agreed check
- How important files are backed up and whether a restore has been tested
- Preferred availability, your town if a visit may be needed and operational constraints
An account owner or authorised adult needs to be available to sign in themselves. We agree access and any changes before proceeding.
Clear findings and next steps
Your report separates what was observed from what could not be verified. Recommendations are prioritised so you can decide what to do now, what can wait and what needs specialist help.
- A plain English summary of agreed AI usage, account/access, email and backup checks
- Findings with evidence basis, business impact, limitations and a suggested action owner
- A prioritised action plan separating immediate decisions, planned work and specialist follow-on
The written report is provided within 5 working days of the review, with a follow-up call included. Neither a checklist nor a successful sign-in proves complete protection or that every backup can be restored.
See the report format: a fictional small-business exampleBased in Horsham, West Sussex. Remote reviews are available UK-wide; local travel is available where a visit is needed, with suitability and any travel costs agreed in your quote.
Before you book
Is this only a cybersecurity review?
No. The review brings practical technology, AI use and basic security together. We discuss which tools staff use, what data they handle, how accounts and suppliers connect, and what recovery would involve. Your quote selects the useful checks rather than imposing a generic audit.
Is this a penetration test or certification?
No. It is a bounded advisory review of authorised checks, not an intrusive test, Cyber Essentials certification or legal/compliance assessment. We identify where a specialist assessment may be useful without implying the review certifies your business.
Do you need administrator credentials or customer files?
Do not send passwords, recovery codes, staff/customer records or configuration exports. An authorised account owner signs in themselves to show the agreed settings. We confirm permissions before any supplier, domain or tenant check and record anything we cannot verify.
Will you implement the recommendations?
The quote distinguishes review/guidance from any specifically agreed settings changes. Wider implementation, AI automation and ongoing support are not included by default. Additional work is scoped and approved separately at £75/hour; software and hardware costs are separate.
Where does ServiceSignal fit?
This consulting review is delivered by Mackie AI Enterprises. ServiceSignal remains the corporate security tooling and assessment product route where deeper work is appropriate. Any follow-on is optional and separately scoped; no licence, subscription or assessment is automatically included.
Can you work remotely, and how long does a review take?
Based in Horsham, West Sussex. Remote reviews are available UK-wide; local travel is available where a visit is needed, with suitability and any travel costs agreed in your quote. The scoping call and questionnaire establish account/system counts, access and expected timing. Your fixed quote records those limits before booking; it does not promise to review every system.
Useful reading before the call
Shadow AI policy for small businesses: five practical rules
A one-page shadow AI policy for small businesses: approved tools, sensitive data, output checks, connected apps and a clear way to report mistakes.
4 min read
How to review supplier access in a small business
A practical way to find and reduce supplier access risk across websites, finance tools, email platforms, cloud storage and AI-enabled services.
3 min read
The first five cyber checks for any small business
Five plain-English checks that quickly show whether a small business has the basics under control.
2 min read
Start with what matters to you
Mention the Small Business AI & Security Review, your main concern and your town if a visit may be needed. I will reply by email to arrange the scoping call. This is an enquiry, not an automatic booking.
Scoping calls are available by phone or video. We will agree a date and time that works for you.
GET IN TOUCH
Start a conversation.
Whether you are exploring a venture, need practical consulting support, or want to discuss a partnership, start the conversation here.
CONSULTINGVENTURE ENQUIRIESPARTNERSHIPSINVESTMENTPRESS & MEDIA