The Founders Log - June 2026 Review
We recently renewed Cyber Essentials for one of our largest clients. It was our first renewal, navigating the new Cyber Essentials process and questionnaire. Because the client's stack is entirely based around Google Workspace, the new batch of questions felt far more relevant to cloud-based services. As is often the case, there was a bit of back-and-forth over email with the assessors. Because assessors are typically more accustomed to standard Microsoft 365 setups, they aren't always super knowledgeable about Google Workspace, so we had to clarify certain processes and settings for them. However, as always, the client passed with flying colours!
On a slightly different note, we had a video call with a lead who specialises in hosting sustainable events, such as music festivals and concerts. Unfortunately, they ended up ghosting us. The call was actually with their IT manager, who had been tasked with finding an IT partner. During our chat, he openly voiced concerns that bringing in an external IT partner might make it difficult for him to justify his own role in the business.
The company is already using Google Workspace, but as is usually the case, they are missing many crucial settings, aren't fully set up, and are struggling to comply with GDPR and other data regulations. The real issue was that the key decision-makers weren't on the call. Given that the task was handed off to an IT manager worried about his employment, it wasn't overly surprising when our follow-ups went unanswered. If you were in his position, why would you recommend an IT company that you felt might threaten your job?
Out of curiosity, I had a look at their setup almost a month later, and I can see they are still missing significant email settings, such as DMARC. DMARC is a vital setting that tells a recipient's email client what to do if it suspects an email isn't genuinely from your domain. Right now, their setup allows those fake emails to go straight through, meaning anyone could successfully spoof their domain—a massive security flaw.
New videos on our YouTube channel
New blog posts
How Do You Answer a Supplier Data Protection Questionnaire About Google Workspace?
How Are Attackers Using AI Against Small Businesses in 2026?
What Are the Biggest Cyber Threats to Small Businesses in 2026?
Assistance and Support Statistics
Team members contacted us 49 times. Of those, 13 contacted us to request assistance (they want to know how to do something better). In comparison, 36 asked for support (something that needs looking at).
In the statistics reported below, a “complete interaction” is when a team member makes contact and can return to work.
Of the individuals who sought assistance to improve their skills, five required a brief interaction lasting less than five minutes, while five needed a more in-depth discussion lasting between five and thirty minutes. Two team members took over thirty minutes, but less than an hour, and one took longer than an hour.
Of the team members who sent messages seeking support, five received a complete interaction and returned to their work within five minutes. 16 completed the interaction and resumed their work within thirty minutes. Five team members took over thirty minutes, but less than an hour, and 10 took longer than an hour because they required third-party support.
All 49 team members reached out to us via our unique instant messaging service, the fastest way to connect; the rest chose slower communication methods.
The stats show that 13 team members would not have gotten in contact if the companies they worked for had offered regular training through Learning Sessions by Kimbley IT.
