Cyber Security – When You’re Hit, Not If!

Practical protection for micro and small businesses in 2026: A plain‑English cyber “autopsy” for SMEs.

You must be based in Oxfordshire and have completed Enterprise Oxfordshire’s Business Support Tool since the 1st of November 2025 to attend this event. If you purchase a ticket without completing this, your ticket will be cancelled. Business Support Tool - Enterprise Oxfordshire Business

See how a realistic attack unfolds, what it costs, and exactly how it could have been prevented – plus safe use of AI and what changing data privacy rules mean for your business in 2026.

Overview

For most micro and small businesses, it’s no longer a question of if you’ll be targeted by a cyber-attack – it’s when.

In this live webinar, we’ll dissect a realistic cyber incident in an SME step‑by‑step, like an autopsy. You’ll see how the attacker got in, what they did once inside, what it cost the business in time, money and reputation – and, crucially, the simple measures that would have stopped it.

From there, we’ll turn the story into a practical, 10‑point cyber checklist designed specifically for micro businesses, including those without an IT provider. We’ll cover:

1. Locking down passwords and MFA
2. Securing home and office Wi‑Fi
3. Being smart about public and open Wi‑Fi
4. Keeping all devices updated and protected
5. Using the cloud securely – not assuming it’s “sorted”
6. Managing data deliberately – what you keep, where, and who sees it
7. Protecting remote staff and contractors
8. Treating email and messaging as high‑risk
9. Planning for “what if” – backups and incident response
10. Making cyber part of everyday business, not a one‑off project

We’ll also weave in two critical 2026 topics:

• Safe use of AI – how small businesses can benefit from AI tools without leaking data, breaching confidentiality or opening new security holes.
• Data privacy in 2026 – what changes to UK data protection rules mean in practice for SMEs, and the simple steps you can take to stay on the right side of the law.

Who should attend?

• Solopreneurs and micro businesses
• Small employers without in‑house IT
• Any organisation that depends on email, cloud tools, websites or customer data

You don’t need to be “technical” – this session is all about clear, real‑world examples and actions you can take the same day.

Your speakers:

Keith Hickson
OxCyber Ambassador · Managing Director, KHInfoSec

Keith is a Cyber Resilience Consultant and Fractional CISO who helps ambitious SMEs position themselves as enterprise‑ready. With over 30 years’ experience across information security, governance and risk management, he supports organisations to build credible, practical and commercially focused security strategies. His expertise spans ISO 27001, Cyber Essentials, supplier assurance, data protection and security roadmaps.

Jamie Read
Director, OxCyber · Technical Director, Flex IT

Jamie blends deep technical expertise with a strong focus on client needs. As Technical Director at Flex IT, he leads the protection of digital ecosystems, building robust cyber infrastructure for businesses of all sizes. His commitment to strong client relationships reflects his belief that effective cyber security depends on the right fusion of technology and human‑centric solutions.