print-676083ac135f0105.js

js systechitsolutions.co.uk collected 2026-10-08 07:38:47 UTC 108,889 bytes, 1 lines download raw bytes

1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3490],{74166:function(e,t,o){(window.__NEXT_P=window.__NEXT_P||[]).push(["/resources/[slug]/print",function(){return o(91460)}])},99243:function(e,t){"use strict";t.Z={src:"/_next/static/media/ISOCombined.ccd02b10.svg",height:184,width:712,blurWidth:0,blurHeight:0}},9353:function(e,t){"use strict";t.Z={src:"/_next/static/media/systech-logo.117ecc84.svg",height:246,width:612,blurWidth:0,blurHeight:0}},95699:function(e,t,o){"use strict";o.d(t,{V:function(){return c}});var i=o(85893),s=o(9353),n=o(99243),a=o(77637),r=o(27142),d=o.n(r);function c(e){let{r:t,format:o="portrait"}=e,r=t.cover,c=[d().cover,"share"===o?d().share:"","a4"===o?d().a4:""].join(" "),l=r.sceneStyle?.[o],h={};return l&&("top"in l&&void 0!==l.top&&(h.top="number"==typeof l.top?`${l.top}px`:l.top),"width"in l&&void 0!==l.width&&(h.width="number"==typeof l.width?`${l.width}px`:l.width),"right"in l&&void 0!==l.right&&(h.right=`${l.right}px`)),(0,i.jsxs)("div",{className:c,"data-cover":!0,children:[(0,i.jsx)("div",{className:d().grid,"aria-hidden":"true"}),(0,i.jsxs)("div",{className:d().top,children:[(0,i.jsx)("img",{className:d().logo,src:s.Z.src,alt:"Systech IT Solutions"}),(0,i.jsx)("span",{className:d().tag,children:t.kind})]}),(0,i.jsxs)("div",{className:d().titleBlock,children:[(0,i.jsxs)("h1",{className:d().title,children:[r.title.plain," ",(0,i.jsx)("span",{children:r.title.accent})]}),(0,i.jsx)("p",{className:d().sub,children:"share"===o?r.shareSubtitle:r.subtitle})]}),(0,i.jsx)("div",{className:d().scene,style:h,children:(0,i.jsx)("img",{src:r.scene.src,width:r.scene.width,height:r.scene.height,alt:""})}),(0,i.jsxs)("div",{className:d().inside,children:[(0,i.jsx)("div",{className:d().insideHead,children:"What is inside"}),r.panels.map((e,t)=>(0,i.jsxs)("div",{className:d().panel,children:[(0,i.jsx)("span",{className:d().panelIcon,children:(0,i.jsx)(a.JO,{name:e.icon,size:26,color:"#5bb1e6"})}),(0,i.jsx)("span",{className:d().panelN,children:t+1}),(0,i.jsx)("p",{className:d().panelTitle,children:e.title}),(0,i.jsx)("p",{className:d().panelText,children:e.text})]},e.title))]}),(0,i.jsx)("div",{className:d().vignette,"aria-hidden":"true"}),(0,i.jsxs)("div",{className:d().foot,children:[(0,i.jsxs)("span",{children:["Checked against ",t.checkedAgainst,", ",(0,i.jsx)("strong",{children:t.checked})," \xb7 systechitsolutions.co.uk"]}),(0,i.jsx)("img",{className:d().iso,src:n.Z.src,alt:"ISO 27001 and ISO 9001 certified"})]})]})}},65996:function(e,t,o){"use strict";o.d(t,{PA:function(){return N}});var i=o(63753),s=o(17713),n=o(37240),a=o(32969),r=o(85215),d=o(78333),c=o(6835),l=o(11648),h=o(75397),u=o(88173),p=o(67102),m=o(89426),w=o(16990),y=o(45659),f=o(6033),g=o(19776),b=o(82492),v=o(45437),k=o(64877),x=o(62366),A=o(87409),S=o(18143),C=o(45644),j=o(60452),T=o(28713);let N={[i.Z.slug]:i.Z,[s.Z.slug]:s.Z,[n.Z.slug]:n.Z,[a.Z.slug]:a.Z,[r.Z.slug]:r.Z,[d.Z.slug]:d.Z,[c.Z.slug]:c.Z,[l.Z.slug]:l.Z,[h.Z.slug]:h.Z,[u.Z.slug]:u.Z,[p.Z.slug]:p.Z,[m.Z.slug]:m.Z,[w.Z.slug]:w.Z,[y.Z.slug]:y.Z,[f.Z.slug]:f.Z,[g.Z.slug]:g.Z,[b.Z.slug]:b.Z,[v.Z.slug]:v.Z,[k.Z.slug]:k.Z,[x.Z.slug]:x.Z,[A.Z.slug]:A.Z,[S.Z.slug]:S.Z,[C.Z.slug]:C.Z,[j.Z.slug]:j.Z,[T.Z.slug]:T.Z};Object.keys(N)},70541:function(e,t,o){"use strict";o.d(t,{Nz:function(){return r},Pr:function(){return s},Rr:function(){return d},SA:function(){return n},Yn:function(){return a},ri:function(){return i}});let i="5 October 2026",s=[{n:1,title:"Why we have this policy",text:"AI tools help us draft, summarise and research faster. This page says which tools to use, the one line about data, and who to ask, so we can use them without putting customers, colleagues or the business at risk. It is short on purpose: if you can remember it at the moment you are about to paste, it is working."},{n:2,title:"Approved tools, and what each is for",text:"Use these, signed in with your work account. Where AI sits inside a tool we already use, it is approved only if it is listed here."},{n:3,title:"The line about data",text:"Never put customer data, personal data, credentials or anything commercially unpublished into a tool the company has not approved."},{n:4,title:"A person owns every output",text:'AI can draft, summarise and suggest. It does not sign, send or decide. The person who uses it is accountable for the accuracy of what goes out, and "the AI wrote it" is not an explanation.'},{n:5,title:"Where AI must not be used",text:"Anything that determines an outcome for a person: hiring, discipline, credit or access. A person makes those decisions.",fill:[{label:"Also not here, for us",wide:!0}]},{n:6,title:"Who to ask",text:"For anything this page does not cover, or a tool you want added, ask. Requests get an answer within the time below.",fill:[{label:"Name"},{label:"Channel"},{label:"We answer within (working days)"}]},{n:7,title:"If you get it wrong",text:"Tell the person above within the hour. Reporting a mistake promptly will not be treated as misconduct: the priority is containment, while a session can still be revoked and what was shared can still be reviewed."}],n=[{n:1,title:"Find what is already in use",icon:"search",intro:"A morning's work, and it gives you facts rather than survey averages.",items:["Microsoft Entra enterprise applications and OAuth consent grants reviewed, newest first, looking hard at anything requesting Mail.Read, Files.Read.All or offline access","Firewall and DNS logs queried for traffic to well-known AI domains over the last 30 days: one enthusiast is a conversation, forty peo

1ple across three departments is a service to provide properly","Browser extensions on managed devices reported through Intune, especially AI extensions that can read and change data on every site","Staff asked, without consequences attached: which AI tools do you use for work, and what for"]},{n:2,title:"Sort it by what each tool can reach",icon:"filter",items:["Tools with a standing connection to company data first: an app with delegated access to mailboxes or SharePoint keeps reading after the person forgets it exists","Tools used with customer or personal data second, because that is where the regulatory exposure sits","Tools used for drafting and summarising public content last: the bulk of usage and the least of your problems"]},{n:3,title:"Write the policy",icon:"document",items:["Approved tools are named as actual products, not categories, with what each is for","The line about data is one sentence people can remember","A person owns every output, and that is stated plainly","Where AI must not be used is stated: anything that determines an outcome for a person","There is a named person and a channel to ask, with a response time you will meet","Self-reporting a mistake promptly is stated as not misconduct"]},{n:4,title:"Roll it out and keep it alive",icon:"refresh",items:["There is an approved option good enough that the workaround stops being worth it","The consent grants you found are revoked, and the admin consent workflow is set up so the next one has to be asked for","The policy is versioned visibly, with the date on the page","It is reviewed quarterly, alongside the quarterly tenant health check, and the approved list is updated first","Each approved use is a row in your AI risk register, with an owner and a review date"]}],a=n.reduce((e,t)=>e+t.items.length,0),r={caption:"The AI risk register's twelve columns, and what goes in each",columns:[{label:"What goes in it",icon:"document"}],rows:[{head:"ID",cells:["A short reference, such as AI-07"]},{head:"Tool and use",cells:["The product and what it is used for. One row per use, not per product"]},{head:"Business owner",cells:["The person who asked for it and answers for it"]},{head:"Data it touches",cells:["Public, internal, confidential, personal or special category"]},{head:"Who it affects",cells:["Staff only, customers, job applicants, the public"]},{head:"What could go wrong",cells:["One or two plain sentences"]},{head:"Likelihood and impact",cells:["Low, medium or high for each"]},{head:"Controls in place",cells:["What actually reduces the risk today"]},{head:"Decision",cells:["Approved, approved with conditions, or not approved"]},{head:"DPIA needed?",cells:["Yes, no with reason, or done with date"]},{head:"Output used in the EU?",cells:["Yes or no"]},{head:"Next review",cells:["A date"]}]},d=[{when:"It bans a category rather than naming a tool",verdict:'"Do not use generative AI with company data" means nothing to someone deciding whether a summarise button in a tool you already pay for is allowed. Name the products.',tone:"bad",icon:"filter"},{when:"It is written to satisfy an auditor rather than to be followed",verdict:"Eleven pages of definitions is acknowledged once and never opened again. Keep the operative part to one page and put the detail in an appendix.",tone:"warn",icon:"document"},{when:"It has no route to yes",verdict:"If the only answer is no and the work still needs doing, the activity moves out of sight. Name who to ask, and answer within the time you promised.",tone:"bad",icon:"signpost"},{when:"Short, dated, named tools, and reviewed this quarter",verdict:"A better answer to a client's procurement questionnaire than a long policy written once, and one your people will actually follow.",tone:"ok",icon:"tick"}]},95195:function(e,t,o){"use strict";o.d(t,{aX:function(){return c},p_:function(){return d}});var i=o(85893),s=o(56623),n=o(359),a=o(70541);let r={id:"canai",width:1200,height:600,title:"Can I use AI for this? Four questions, in order",desc:"Start with a task. If the tool is not on the approved list, do not use it for work: ask, and use an approved tool meanwhile. If the task determines an outcome for a person, such as hiring, discipline, credit or access, a person decides, not AI. If the task means putting customer data, personal data, credentials or anything unpublished into a tool that is not approved for it, stop. Otherwise use it, check the output, and own it before it goes out.",sizes:{decision:{w:260,h:100},outcome:{w:300,h:84},start:{w:420,h:46}},regions:[{x:20,y:100,w:540,h:490,label:"The questions, in order",tone:"muted"},{x:600,y:100,w:580,h:490,label:"What the policy says",tone:"tint"}],nodes:[{id:"start",kind:"start",text:"You have a task and an AI tool in mind",icon:"laptop",x:300,y:40},{id:"d1",kind:"decision",text:"Is the tool on our approved list, signed in with your work account?",x:300,y:180},{id:"o1",kind:"outcome",text:"Do not use it for work. Ask the named person, and use an approved tool meanwhile: asking should be easier than working around",icon:"signpost",tone:"warn",x:890,y:180,w:540,h:90},{id:"d2",kind:"decision",text:"Does the task determine an outcome for a person: hiring, discipline, credit or access?",x:300,y:305},{id:"o2",kind:"outcome",text:"Not with AI. A person makes the decision, and owns it",icon:"user",tone:"bad",x:890,y:305,w:540,h:84},{id:"d3",kind:"decision",text:"Is the tool approved for the data the task needs?",x:300,y:430},{id:"o3",kind:"outcome",text:"Stop. Never put customer data, personal data, credentials or anything unpublished into a tool the company has not approved for it",icon:"lock",tone:"bad",x:890,y:430,w:540,h:90},{id:"o4",kind:"outcome",text:"Use it. Check the output: AI can draft, summarise and suggest, but you own what goes out",icon:"tick",tone:"ok",x:890,y:545,w:540,h:84}],edges:[{from:"start",to:"d1"},{from:"d1",to:"o1",label:"No"},{from:"d1",to:"d2",label:"Yes"},{from:"d2",to:"o2",label:"Yes"},{from:"d2",to:"d3",label:"No"},{from:"d3",to:"o3",label:"No"},{from:"d3",to:"o4",label:"Yes",via:[[300,545]]}],note:{x:34,y:124,width:150,text:"Got it wrong? Tell the named person within the hour. Prompt self

1-reporting is not misconduct."}},d=()=>(0,i.jsx)(n.C,{spec:r}),c=e=>{let{print:t=!1}=e;return(0,i.jsx)(s.q,{spec:a.Nz,print:t,dense:t})}},28713:function(e,t,o){"use strict";o.d(t,{Z:function(){return l}});var i=o(85893),s=o(24264),n=o(81880),a=o(70541),r=o(95195),d=o(91693);let c=e=>a.SA[e-1];var l={slug:"ai-acceptable-use-policy-template",kind:"Template",checked:a.ri,checkedAgainst:"the ICO's AI guidance",cover:{title:{plain:"AI acceptable use",accent:"policy template"},subtitle:"A short, dated policy in plain English, on one page you can fill in: the approved tools, the one line about data, who owns the output, where AI must not be used, and who to ask.",shareSubtitle:"Approved tools, the line about data, and who to ask, on one page people will remember.",scene:{src:"/_next/static/media/scene-ai-acceptable-use-policy-template.54ab9084.png",height:1473,width:2308,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAFCAYAAAB4ka1VAAAAnUlEQVR42mMAgT///7NXTNvkkFQ3qzC7c/U5BrdSYwYguHPrFhMDCGT2bZjD4FPxf8qCDX96Zq36xcAQ9H/u6t0b/v//z8igauakohFU8oiBgWHJ0vW7Di5at+sQAwPDcuuQnFcW9g5qDEBgAMQ5QJzhEllwzieu6DzIUCDOA2J9BjCQ1haTkpE3Z2BgsAFiWykZOXN5dX1RBgYGBgD6MDILQhqkwgAAAABJRU5ErkJggg==",blurWidth:8,blurHeight:5},sceneStyle:{portrait:{top:410,width:820},share:{top:104,width:650,right:-20},a4:{top:"104mm",width:"198mm"}},panels:[{icon:"document",title:"The policy on one page",text:"Seven short clauses with the blanks to fill in: your tools, your owner, your review date. Fillable on screen."},{icon:"signpost",title:"Can I use this? A flowchart",text:"Four questions staff can answer in the moment, from the approved list to who owns the output."},{icon:"search",title:`Before and after, ${a.Yn} checks`,text:"Find what is already in use, write the policy, roll it out, and keep it alive with a quarterly review and a register."}]},heroFacts:[{icon:"document",text:"Seven clauses, one page, fillable"},{icon:"signpost",text:"A four-question flowchart for staff"},{icon:"search",text:`${a.Yn} checks to find, write and keep it`}],gateBlurb:"The one-page policy you can type into, the staff flowchart, the shadow AI discovery checks and the register columns.",aside:{heading:"Rolling out Copilot alongside the policy?",text:"The Copilot readiness check shows what Copilot would be able to surface across your tenant before anyone gets a licence: 45 minutes, plus a written readiness summary within three working days.",href:"/book/copilot-readiness",label:"Book the Copilot readiness check"},closeBullets:["45 minutes, plus a written readiness summary within three working days","What Copilot would be able to surface across your tenant as it stands, and the oversharing and site-ownership gaps that matter, ranked","A straight answer on whether to proceed, pilot narrowly, or fix first"],introNote:`Find what is in use first (page 4), then fill in the policy (page 3) with the tools you are actually approving. Keep the operative part to this one page; put any detail in an appendix. The ICO points were checked on ${a.ri}. This is a template, not legal advice: adapt it to your organisation.`,introCallout:{title:"Short enough to remember",paragraphs:["A policy works when it can be recalled from memory at the moment someone is about to paste. Name the tools, draw one line about data, say that a person owns every output, and give people a named route to ask.","Where AI processes personal data, the ICO says that in the vast majority of cases it involves processing likely to result in a high risk, and that accountability cannot be delegated to technical teams. The policy is for staff; the register records what the business decided."]},pages:[{label:"The policy",caption:"The policy on one page: seven clauses, fillable on screen",fields:"worksheet",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)("h2",{className:n.S0.h2,style:{margin:"0 0 3mm"},children:"AI acceptable use policy"}),(0,i.jsx)(d.y,{print:!0})]})},{label:"Before you write it",caption:"Before and after: find what is in use, sort it, write it, keep it alive",fields:"checks",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.Fb,{kicker:"Before and after",title:"Find it, write it, keep it",lead:"What people already use, sorted by what each tool can reach, then the policy, then the habits that stop it going stale."}),(0,i.jsx)(s.s6,{sections:[c(1),c(2),c(3),c(4)],dense:!0})]})},{label:"Can I use this?",caption:"Flowchart for staff: can I use AI for this task?",land:!0,body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.Fb,{kicker:"For staff, in the moment",title:"Can I use AI for this?",lead:"Four questions, in order. Print it next to the policy: it is the policy, as a decision."}),(0,i.jsx)(n.RQ,{children:(0,i.jsx)(r.p_,{})})]})},{label:"The register",caption:"The AI risk register: twelve columns, one row per use",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.Fb,{kicker:"What the business decided",title:"The AI risk register",lead:"The policy is for staff. The register is for you, your auditors and your clients: a row per AI use, not per product, with one owner and a quarterly review."}),(0,i.jsx)(r.aX,{print:!0}),(0,i.jsxs)("div",{className:n.S0.callout,style:{marginTop:"4mm"},children:[(0,i.jsx)("h3",{className:n.S0.h3,children:"The DPIA column"}),(0,i.jsxs)("p",{className:n.S0.p,style:{marginBottom:0},children:["Where AI processes personal data, the ICOâs guidance says that in the vast majority of cases it will involve processing likely to result in a high risk to individualsâ rights and freedoms, which triggers a data protection impact assessment. Where you decide a use is not high risk, you still need to document how you made that assessment. The guidance is under review following the Data (Use and Access) Act. Checked ",a.ri,"."]})]})]})}],closeHead:{kicker:"Where this leaves you",title:"Why most AI policies fail",lead:"Not because people are careless. For the same three reasons, each with a fix that fits on this page."},closeBody:(0,i.jsx)(s.uC,{items:a.Rr,print:!0}),pdf:{subject:"A one-page AI acceptable use policy template in plain English: a

1pproved tools, the line about data, human ownership, where AI must not be used, and who to ask.",keywords:"AI acceptable use policy template, AI policy, shadow AI, Copilot, AI risk register, DPIA, ICO, small business"}}},91693:function(e,t,o){"use strict";o.d(t,{y:function(){return h}});var i=o(85893),s=o(70541),n=o(6490),a=o.n(n);let r=e=>{let{wide:t=!1}=e;return(0,i.jsx)("span",{className:t?a().boxWide:a().cell,"aria-hidden":"true"})};function d(e){let{c:t,print:o}=e;return t.fill?(0,i.jsx)("div",{className:o?a().fillsPrint:a().fillsWeb,children:t.fill.map(e=>(0,i.jsxs)("div",{className:e.wide?a().fillWide:a().fill,children:[(0,i.jsx)("span",{children:e.label}),o?(0,i.jsx)(r,{wide:e.wide}):(0,i.jsx)("span",{className:a().blank,"aria-hidden":"true"})]},e.label))}):null}function c(e){let{print:t}=e;return(0,i.jsxs)("table",{className:t?a().toolsPrint:a().toolsWeb,"aria-label":"Approved AI tools: the tool, what it is approved for, and how to sign in",children:[(0,i.jsx)("thead",{children:(0,i.jsxs)("tr",{children:[(0,i.jsx)("th",{scope:"col",children:"Tool"}),(0,i.jsx)("th",{scope:"col",children:"Approved for"}),(0,i.jsx)("th",{scope:"col",children:"Sign in with"})]})}),(0,i.jsx)("tbody",{children:Array.from({length:4},(e,o)=>(0,i.jsxs)("tr",{children:[(0,i.jsx)("td",{children:t?(0,i.jsx)(r,{}):0===o?(0,i.jsx)("em",{children:"e.g. the AI assistant in your office suite"}):null}),(0,i.jsx)("td",{children:t?(0,i.jsx)(r,{wide:!0}):0===o?(0,i.jsx)("em",{children:"e.g. drafting and summarising internal documents"}):null}),(0,i.jsx)("td",{children:t?(0,i.jsx)(r,{}):0===o?(0,i.jsx)("em",{children:"e.g. work account only"}):null})]},o))})]})}let l=["Organisation","Version","Dated","Policy owner","Next review"];function h(e){let{print:t=!1}=e;return(0,i.jsxs)("div",{className:t?a().print:a().web,children:[(0,i.jsx)("div",{className:a().meta,children:l.map(e=>(0,i.jsxs)("div",{className:a().metaField,children:[(0,i.jsx)("span",{children:e}),t?(0,i.jsx)(r,{}):(0,i.jsx)("span",{className:a().blank,"aria-hidden":"true"})]},e))}),(0,i.jsx)("ol",{className:a().clauses,children:s.Pr.map(e=>(0,i.jsxs)("li",{className:3===e.n?a().line:void 0,children:[(0,i.jsxs)("h3",{className:a().clauseTitle,children:[(0,i.jsxs)("b",{children:[e.n,"."]})," ",e.title]}),(0,i.jsx)("p",{className:a().clauseText,children:e.text}),2===e.n&&(0,i.jsx)(c,{print:t}),(0,i.jsx)(d,{c:e,print:t})]},e.n))}),(0,i.jsxs)("div",{className:a().sign,children:[(0,i.jsxs)("div",{className:a().metaField,children:[(0,i.jsx)("span",{children:"Approved by (director)"}),t?(0,i.jsx)(r,{}):(0,i.jsx)("span",{className:a().blank,"aria-hidden":"true"})]}),(0,i.jsxs)("div",{className:a().metaField,children:[(0,i.jsx)("span",{children:"Date"}),t?(0,i.jsx)(r,{}):(0,i.jsx)("span",{className:a().blank,"aria-hidden":"true"})]}),(0,i.jsx)("p",{className:a().note,children:"Template: adapt it to your organisation. It is not legal advice."})]})]})}},31292:function(e,t,o){"use strict";o.d(t,{LY:function(){return s},Ri:function(){return c},SA:function(){return a},Yn:function(){return r},Z6:function(){return n},mr:function(){return d},ri:function(){return i}});let i="5 October 2026",s=[{label:"ICO: Personal data breaches, a guide",href:"https://ico.org.uk/for-organisations/report-a-breach/personal-data-breach/personal-data-breaches-a-guide/"},{label:"ICO: 72 hours, how to respond to a personal data breach",href:"https://ico.org.uk/for-organisations/report-a-breach/personal-data-breach/"},{label:"NCSC: Incident management",href:"https://www.ncsc.gov.uk/section/about-ncsc/incident-management"},{label:"NCSC: Cyber incident response processes",href:"https://www.ncsc.gov.uk/collection/incident-management/cyber-incident-response-processes"},{label:"NCSC: Cyber insurance guidance",href:"https://www.ncsc.gov.uk/guidance/cyber-insurance-guidance"},{label:"Report Fraud, the UK's national fraud and cybercrime reporting centre",href:"https://www.reportfraud.police.uk/"}],n=[{label:"Incident lead",hint:"declares the incident and makes the calls; name and two ways to reach them"},{label:"Deputy",hint:"if the lead cannot be reached; name and two ways to reach them"},{label:"IT lead or IT provider's incident line",hint:"contains and restores"},{label:"Data protection lead",hint:"decides whether the ICO and the people affected must be told"},{label:"Communications lead",hint:"staff, customers, suppliers, press"},{label:"Director who signs off decisions",hint:"payments, legal advice, the insurer"},{label:"Insurer incident line and policy number",hint:"if you have cyber cover"},{label:"Legal adviser and bank fraud line"},{label:"How staff are reached if email and Teams are down",wide:!0},{label:"Where the offline copy of this plan, the backup credentials and this contact list are

1kept",wide:!0}],a=[{n:1,title:"The first 15 minutes: declare and protect",icon:"alert",items:["Whoever spots it tells the incident lead by phone, not only by email, and notes the time","The incident lead declares an incident and opens a log: the time, what was seen, who has been told","Affected devices are disconnected from the network (cable out, Wi-Fi off); check with your IT lead before switching anything off, so evidence is not lost","Nobody replies to, pays or negotiates with an attacker without a decision from the incident lead and advice from your insurer or responders"]},{n:2,title:"Within the hour: contain and call",icon:"phone",items:["Your IT lead or IT provider is on the call, and confirms what is affected and what is not","Accounts that may be compromised are reset and their sessions revoked, administrators first; activity is blocked and affected systems isolated","If you have cyber cover, your insurer's incident line is called as the policy sets out: some insurers provide forensic, legal and public relations support","Staff are told what to do and what not to do, through a channel that does not depend on the affected systems","Evidence is kept: logs, ransom notes, suspicious emails and screenshots are not deleted while cleaning up","Every action and decision goes in the log with the time and who made it"]},{n:3,title:"Within 24 hours: assess, and decide who to tell",icon:"search",items:["You have decided whether personal data is involved and, if so, whether the breach is likely to result in a risk to people's rights and freedoms","If you suspect criminal intent, it is reported to Report Fraud (England, Wales and Northern Ireland) or Police Scotland","You have considered reporting to the NCSC; if you are not sure which organisations to contact, the government signposting service at gov.uk/report-cyber helps","You have decided what customers and suppliers are told, and who speaks for the organisation","Systems are restored from known-good backups only once the way in has been closed"]},{n:4,title:"Within 72 hours: report and record",icon:"document",items:["If the breach is notifiable, it is reported to the ICO without undue delay, and not later than 72 hours after becoming aware of it","If you do not have every detail yet, you report what you know: the information can be provided in phases, without undue further delay","If the breach is likely to result in a high risk to individuals, the people affected are told directly and without undue delay","If you decide not to report, the reason is written down: you need to be able to justify the decision","The breach is recorded whether or not it is reported"]},{n:5,title:"Afterwards: review and rehearse",icon:"refresh",intro:"Our recommendation, not a regulatory requirement.",items:["A short review once systems are back: what happened, what worked, what to change","The plan, the contact list and the offline copy are updated with what was learned","The plan is walked through with the people named in it at least once a year, and whenever one of them changes"]}],r=a.reduce((e,t)=>e+t.items.length,0),d={caption:"Who to notify after a cyber incident: when, how, and the source for each rule",columns:[{label:"When",icon:"clock"},{label:"How",icon:"route"},{label:"Source, checked 5 October 2026",icon:"document",tone:"muted"}],rows:[{head:"Your insurer",cells:["As your policy sets out, if you have cyber cover: check its notification terms now, not on the day","The incident line in your policy documents","ICO: consider notifying your insurer. NCSC cyber insurance guidance"]},{head:"The ICO",cells:["A notifiable personal data breach: without undue delay, and not later than 72 hours after becoming aware","Online form, about 30 minutes; details can follow in phases","ICO, Personal data breaches: a guide"]},{head:"The people affected",cells:["A high risk to their rights and freedoms is likely: directly and without undue delay","Directly, in clear terms","ICO, Personal data breaches: a guide"]},{head:"Report Fraud, or Police Scotland",cells:["You believe there may be criminal intent","England, Wales and Northern Ireland: Report Fraud; a business under attack can call 0300 123 2040. Scotland: Police Scotland on 101","ICO breach page; reportfraud.police.uk"]},{head:"The NCSC",cells:["The incident was caused by a malicious actor; worth considering in any significant incident","gov.uk/report-cyber signposts you to the right organisations","ICO breach page; NCSC incident management"]}]}

1,c=[{when:"The plan lives on the systems it is meant to recover",verdict:"Print it. Keep a copy with the backup credentials and the contact list somewhere that does not depend on the email platform or the file shares.",tone:"bad",icon:"document"},{when:"One name against every role",verdict:"Add a deputy and a second way to reach each person. Incidents rarely start at a convenient time.",tone:"warn",icon:"users"},{when:"The 72 hours counted from the day IT finished investigating",verdict:"The ICO counts from becoming aware of the breach. Report what you know and add the detail later, in phases.",tone:"warn",icon:"clock"},{when:"Every field filled, and walked through this year",verdict:"A plan people can follow on the worst possible day. Keep it dated, and review it whenever someone named in it changes.",tone:"ok",icon:"tick"}]},33525:function(e,t,o){"use strict";o.d(t,{TR:function(){return d},gU:function(){return c}});var i=o(85893),s=o(56623),n=o(359),a=o(31292);let r={id:"icoflow",width:1200,height:600,title:"Does the ICO need to be told, and do the people affected?",desc:"Start from a declared incident. If no personal data is involved, the ICO rules do not apply, but record what happened and consider your insurer, Report Fraud and the NCSC. If personal data is involved but a risk to people's rights and freedoms is unlikely, you do not have to report it, but record the breach and be able to justify the decision. If a risk is likely, report to the ICO without undue delay and not later than 72 hours after becoming aware. If a high risk is likely, also tell the people affected directly and without undue delay.",sizes:{decision:{w:260,h:100},outcome:{w:300,h:84},start:{w:420,h:46}},regions:[{x:20,y:100,w:540,h:490,label:"The questions, in order",tone:"muted"},{x:600,y:100,w:580,h:490,label:"What the ICO's guidance says to do",tone:"tint"}],nodes:[{id:"start",kind:"start",text:"An incident is declared, and the log is open",icon:"alert",x:300,y:40},{id:"d1",kind:"decision",text:"Is personal data involved?",x:300,y:180},{id:"o1",kind:"outcome",text:"The ICO breach rules do not apply. Record what happened, and still consider your insurer, Report Fraud or Police Scotland, and the NCSC",icon:"document",tone:"muted",x:890,y:180,w:540,h:90},{id:"d2",kind:"decision",text:"Is the breach likely to result in a risk to people's rights and freedoms?",x:300,y:305},{id:"o2",kind:"outcome",text:"You don't have to report it. Record the breach, and write down why you decided not to report: you need to be able to justify the decision",icon:"clipboard",tone:"warn",x:890,y:305,w:540,h:90},{id:"d3",kind:"decision",text:"Is a high risk to the people affected likely?",x:300,y:430},{id:"o3",kind:"outcome",text:"Report to the ICO, and tell the people affected directly and without undue delay",icon:"users",tone:"bad",x:890,y:430,w:540,h:84},{id:"o4",kind:"outcome",text:"Report to the ICO without undue delay, and not later than 72 hours after becoming aware. Details can follow in phases",icon:"clock",tone:"tint",x:890,y:545,w:540,h:84}],edges:[{from:"start",to:"d1"},{from:"d1",to:"o1",label:"No"},{from:"d1",to:"d2",label:"Yes"},{from:"d2",to:"o2",label:"No"},{from:"d2",to:"d3",label:"Yes"},{from:"d3",to:"o3",label:"Yes"},{from:"d3",to:"o4",label:"No",via:[[300,545]]}],note:{x:34,y:124,width:150,text:"Record every breach, reported or not. The 72 hours run from becoming aware of the breach."}},d=()=>(0,i.jsx)(n.C,{spec:r}),c=e=>{let{print:t=!1}=e;return(0,i.jsx)(s.q,{spec:a.mr,print:t,dense:t})}},60452:function(e,t,o){"use strict";o.d(t,{Z:function(){return l}});var i=o(85893),s=o(24264),n=o(6156),a=o(81880),r=o(31292),d=o(33525);let c=e=>r.SA[e-1];var l={slug:"cyber-incident-response-plan-template",kind:"Template",checked:r.ri,checkedAgainst:"the ICO and the NCSC",cover:{title:{plain:"Cyber incident",accent:"response plan"},subtitle:"A one-page plan to fill in and print: the roles and contacts, the first hour, and who to notify, with the ICO's 72-hour rule and the insurer, police and NCSC routes checked and cited.",shareSubtitle:"Roles, contacts, the first hour and who to notify, on one page you can print.",scene:{src:"/_next/static/media/scene-cyber-incident-response-plan-template.b50b09b5.png",height:1680,width:2310,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAGCAYAAAD+Bd/7AAAAxklEQVR42mP4//8/Q2VlOTOI/v+smff/4yZeELutZzLLqr03GBkYGNwYQQIMDElWxZ0Lp5Z0zp/CIJJsDRIDYQYQoRJancIQ0vB/7e7T/9fuPPGfwSz1f2h+T/H////ZGWasOpjjGld53jen/X9wTsv/rKre/wzG4f8jshputE1bHcVgZutsKiHEkMvAIL/CyDvlWnb99Dsc8gYrGRgYMhkYGDQZ/v//z8DAwMDHysCgIsPAYK4hx+DCwMCgau0WzP///38GAEV/Vh2UpaBKAAAAAElFTkSuQmCC",blurWidth:8,blurHeight:6},sceneStyle:{portrait:{top:400,width:780},share:{top:80,width:600,right:-10},a4:{top:"102mm",width:"188mm"}},panels:[{icon:"clipboard",title:"The plan on one page",text:"Who leads, who deputises, who calls the insurer, who decides about the ICO, and where the offline copy lives. Fillable on screen."},{icon:"clock",title:`The first hour, then 72, in ${r.Yn} steps`,text:"Declare and protect, contain and call, assess, report and record, with tick boxes to work down on the day."},{icon:"route",title:"Who to notify, and when",text:"The ICO's 72 hours, the people affected, Report Fraud or Police Scotland, the NCSC and your insurer, each with its source."}]},heroFacts:[{icon:"clipboard",text:"Roles and contacts on one printable page"},{icon:"clock",text:`The first hour to 72 hours, ${r.Yn} steps`},{icon:"route",text:"Who to notify, checked against the ICO and NCSC"}],gateBlurb:"The one-page plan you can type into, the first-hour steps with tick boxes, the ICO decision as a flowchart and who to notify, with sources.",aside:{heading:"Not sure what you could recover, or how fast?",text:"The backup and recovery review looks at coverage, immutability and recovery order against what you run: 45 minutes, plus a written recovery position within three working days.",href:"/book/recovery-readiness",label:"Book the backup and recovery review"},closeBullets:["45 minutes, plus a written recovery position within three working days","What is covered, what is not, and what you may believe is covered and is not, with a recovery order for the systems that matter and realistic times","What to test first, so the next restore is proved rather than assumed"],introNote:`Fill in page 3 with the people who will actually be on the call, print it, and keep a copy off the systems it describes. The reporting rules were checked against the ICO, the NCSC and Report Fraud on ${r.ri}. This is a template, not legal advice: adapt it to your organisation, and take advice on any decision to report.`,introCallout:{title:"Most organisations do not have one",paragraphs:["The Cyber Security Breaches Survey 2025/26 (DSIT and the Home Office, published 30 April 2026) found formal incident response plans in 25% of businesses: 21% of micro businesses, against 57% of medium-sized and 76% of large ones.","A plan does not need to be long to work. It needs names, a second w

1ay to reach each of them, the first steps in order, and the reporting deadlines, somewhere you can read it when the systems are down."]},pages:[{label:"The plan",caption:"The plan on one page: roles, contacts and the first steps, fillable on screen",fields:"worksheet",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Print this page",title:"Your incident response plan",lead:"Two people and two ways to reach each one, for every role. Keep a printed copy with the backup credentials, somewhere that does not depend on the email platform or the file shares."}),(0,i.jsx)(n.i,{fields:r.Z6,print:!0}),(0,i.jsxs)("div",{className:a.S0.callout,style:{marginTop:"4mm",padding:"3mm 4.5mm"},children:[(0,i.jsx)("h3",{className:a.S0.h3,style:{marginTop:0},children:"The first steps, in order"}),(0,i.jsx)(a.kE,{items:["Tell the incident lead by phone, and open a log with the time.","Disconnect affected devices from the network; ask before switching anything off.","Call your IT lead, and your insurer's incident line if you have cover.","Reset compromised accounts and revoke their sessions, administrators first.","Decide by 72 hours: the ICO, the people affected, Report Fraud, the NCSC."]})]})]})},{label:"The first day",caption:"The first 15 minutes, the first hour and the first 24 hours, with tick boxes",fields:"checks",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"On the day",title:"The first hour, and the first day",lead:"Work down it in order, tick as you go, and write every action and decision in the log with the time and who made it."}),(0,i.jsx)(s.s6,{sections:[c(1),c(2),c(3)],dense:!0})]})},{label:"72 hours",caption:"Within 72 hours, and afterwards: report, record, review",fields:"checks",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"The deadline",title:"Within 72 hours, and afterwards",lead:"The ICO's rule runs from becoming aware of the breach, not from the end of the investigation. Report what you know; the detail can follow."}),(0,i.jsx)(s.s6,{sections:[c(4),c(5)]}),(0,i.jsxs)("div",{className:a.S0.callout,style:{marginTop:"4mm"},children:[(0,i.jsxs)("h3",{className:a.S0.h3,children:["Sources, checked ",r.ri]}),(0,i.jsx)("ul",{className:a.S0.small,style:{margin:0,paddingLeft:"4mm"},children:r.LY.map(e=>(0,i.jsxs)("li",{children:[e.label,": ",(0,i.jsx)("a",{href:e.href,children:e.href.replace("https://","")})]},e.href))})]})]})},{label:"The ICO decision",caption:"Flowchart: does the ICO need to be told, and do the people affected?",land:!0,body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Within 72 hours",title:"The ICO, and the people affected",lead:"Three questions, in order. The answers are the ICO's own guidance; whatever you decide, record the breach and the reason."}),(0,i.jsx)(a.RQ,{children:(0,i.jsx)(d.TR,{})})]})},{label:"Who to notify",caption:"Who to notify, when and how, with the source for each",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"The reporting routes",title:"Who to notify, and when",lead:"Five routes, each with its rule and where it comes from. The ICO's guidance asks you to consider all of them: it is your responsibility to notify all the appropriate organisations."}),(0,i.jsx)(d.gU,{print:!0}),(0,i.jsxs)("div",{className:a.S0.callout,style:{marginTop:"5mm"},children:[(0,i.jsx)("h3",{className:a.S0.h3,children:"Before the day, not on it"}),(0,i.jsx)(a.kE,{items:["Read your cyber policy's notification terms, and put the incident line and policy number on the plan.","Bookmark the ICO's online breach form and the government's report-cyber signposting service.","Agree who decides whether to report, and who signs the report off."]})]})]})}],closeHead:{kicker:"Where this leaves you",title:"What makes a plan work on the day",lead:"Not length. Names, deputies, a second w

1ay to reach them, the steps in order, and a copy you can read with the systems down."},closeBody:(0,i.jsx)(s.uC,{items:r.Ri,print:!0}),pdf:{subject:"A one-page cyber incident response plan template: roles and contacts, the first hour, and who to notify, with the ICO 72-hour rule and the NCSC, police and insurer routes.",keywords:"cyber incident response plan template, ICO 72 hours, personal data breach, NCSC, Report Fraud, Action Fraud, cyber insurance, small business"}}},46051:function(e,t,o){"use strict";o.d(t,{LY:function(){return s},SA:function(){return n},Yn:function(){return a},Z:function(){return r},Zy:function(){return c},a5:function(){return d},ri:function(){return i}});let i="5 October 2026",s=[{label:"Microsoft Learn: Manage Microsoft-certified solution provider partner relationships",href:"https://learn.microsoft.com/microsoft-365/commerce/manage-partners"},{label:"Microsoft Learn: Review partner administrative privileges",href:"https://learn.microsoft.com/microsoft-365/commerce/review-partner-admin-privileges"},{label:"Microsoft Learn: Get delegated administration privileges from a customer (Azure role assignments)",href:"https://learn.microsoft.com/partner-center/customers/customers-revoke-admin-privileges"},{label:"Microsoft Learn: Transfer new commerce license-based subscriptions between CSP partners",href:"https://learn.microsoft.com/partner-center/customers/transfer-new-commerce-license-based-subscriptions"}],n=[{n:1,title:"The contract and the notice period",icon:"document",intro:"This is a template, not legal advice. Your contract decides the detail: read it, and take advice where the terms are unclear.",items:["You have the signed contract and every variation to it, and know which version is current","You know the minimum term, the notice period, how notice must be given (in writing, and to whom) and the date it must arrive by","You know what the contract says happens at the end: data return, documentation, offboarding assistance, and whether that assistance is included or billed","Equipment, software and licences on a lease or in the provider's name are listed, with what happens to each at exit","The new provider's start date leaves an overlap with the old one, not a gap","Notice is given only once the items above are known, and you keep a copy of the notice and its acknowledgement"]},{n:2,title:"Admin access you own",icon:"admin",items:["At least two break-glass Global Administrator accounts exist in your Microsoft 365 tenant, owned by you, with credentials the provider does not hold","You have a list of every admin account in the tenant and who uses it, including accounts named after the provider or its engineers","You have checked Settings, Partner relationships in the Microsoft 365 admin center, which shows the partners you work with and which hold admin roles, and saved a copy","Admin logins for the firewall, switches, wireless, backup platform and line-of-business systems are held by you, not only by the provider","Any Azure subscriptions are listed with their role assignments: removing a partner's admin roles in Microsoft 365 does not remove its role assignments on an Azure subscription","Shared passwords the provider knows are listed, ready to change at cutover"]},{n:3,title:"Documentation",icon:"clipboard",items:["A current asset register: devices, servers and network equipment, and who each is assigned to","A network diagram, IP addressing, VLANs, firewall rules and VPN configuration, as they are today","Notes or runbooks for recurring work: starters and leavers, patching, backups and renewals","The password vault export, or an agreed way to pass each credential across securely","Third-party supplier contacts with account numbers: connectivity, telephony and line-of-business application vendors","Open tickets, known problems and work in progress, with the status of each"]},{n:4,title:"Licences and subscriptions",icon:"licence",items:["Every subscription is listed with its seats, term, billing frequency, renewal date and who it is bought through","You know which Microsoft subscriptions are bought through the outgoing provider as a partner, and which directly","Partner-bought subscriptions have a transfer plan: you accept the new partner's relationship request, it sends a transfer request, and the outgoing partner approves it","You know a transferred subscription keeps its seat count and renewal settings, and does not start a new cancellation window","Software keys, vendor portal logins and support contracts held in the provider's name are moved into yours"],note:{label:"Checked against Microsoft Learn",text:"A transfer request that is not acted on expires after 30 days, so agree the date with both providers before it is sent."}},{n:5,title:"Domain and DNS",icon:"globe",items:["Every domain is listed with its registrar, renewal date and the account it sits in","Each registrar account is in your organisation's name, with a contact address you control and MFA on the login","You know where DNS is hosted, which may not be the registrar, and you can sign in to it","An export of every DNS zone is saved before anything changes, including MX, SPF, DKIM, DMARC, autodiscover and domain verification records","Any move of DNS host is scheduled after the export, with mail flow tested straight afterwards","Certificates for your domains are listed with their expiry dates and where they are installed"]},{n:6,title:"Backups",icon:"vault",items:["You know what is backed up, by which product, how often, and where the copies are held","You know whose account the backup storage sits in, and what happens to the copies when the contract ends","Retention you need for compliance is listed, with how the history will be kept or exported if the platform changes","A restore has been tested before cutover from the backup that will continue, not only from the one being retired","The old backups are not deleted until the new ones have run and a restore from them has been proved"]},{n:7,title:"Security tooling and monitoring",icon:"shield",items:["Every agent the provider installed is listed: monitoring and management, endpoint protection, patching and remote access","The new tools go on before the old ones come off, so no device is left without endpoint protection","Alerts are redirected: you know

1who receives backup, security and monitoring alerts on the first day of the new arrangement","Conditional Access, MFA and device policies are documented before anyone changes them","Security incidents from the last twelve months, and anything still under investigation, are handed over in writing"]},{n:8,title:"Cutover and close",icon:"tick",items:["The new provider confirms its own access works before the outgoing provider's access is removed","The outgoing partner's admin roles are removed in the Microsoft 365 admin center (Settings, Partner relationships, Remove roles); removing roles does not end the partner relationship, so ask the partner to end that too","The outgoing provider's Azure role assignments, guest and shared admin accounts, and remote access tools are removed","Passwords the outgoing provider knew are changed, including service accounts and network devices","You have written confirmation of the data the outgoing provider still holds, and the date it will be deleted","A short review on day 30: anything missed, tickets still open, and the date of the next review"]}],a=n.reduce((e,t)=>e+t.items.length,0),r=["A list of every admin account you created or use in our Microsoft 365 tenant, Azure subscriptions and network devices","The current documentation: asset register, network diagram, firewall rules, VPN configuration and runbooks","The password vault export, or a secure transfer of each credential we will need","Every subscription and licence bought on our behalf, with term, seats and renewal dates, and your approval of the transfer request when it arrives","Registrar and DNS host details for our domains, and confirmation the accounts are in our name","What is backed up, where the copies are held, the retention, and what happens to the copies at the end of the contract","Open tickets, known problems and security incidents from the last twelve months","Written confirmation of the data you will still hold after the end date, and when it will be deleted"],d=[{when:"The tenant, domain or licences sit in the provider's name",verdict:"Leaving becomes much harder than

1it should be. Before notice, confirm you own the Microsoft tenant, the domain registration and break-glass admin accounts, and plan any subscription transfer.",tone:"bad",icon:"key"},{when:"Old access removed before new access works",verdict:"A gap in which nobody can administer the estate. Remove the outgoing provider's roles only after the new provider has confirmed its own access.",tone:"warn",icon:"clock"},{when:"Backups retired with the old contract",verdict:"History you may need for compliance disappears. Keep the old copies until the new backups have run and a restore from them has been proved.",tone:"bad",icon:"vault"},{when:"Every section ticked, with the evidence saved",verdict:"A handover done once. File the register with the contract, and book the day 30 review.",tone:"ok",icon:"tick"}],c=[{label:"Contract end date and notice period",hint:"from the current contract"},{label:"Date notice given, how, and acknowledged by"},{label:"Outgoing provider: contact, phone and email"},{label:"New provider: contact and start date"},{label:"Break-glass admin accounts",hint:"names only, and where the credentials are kept"},{label:"Domains, registrar and the account they sit in"},{label:"DNS host, and the date the zone export was saved"},{label:"Backup product, storage account and retention"},{label:"Subscriptions bought through the outgoing partner, and the transfer date agreed",wide:!0},{label:"Date of the restore test before cutover, and the result"},{label:"Date the outgoing provider's access was removed, and by whom"},{label:"Data still held by the outgoing provider, and the deletion date confirmed in writing",wide:!0}]},13893:function(e,t,o){"use strict";o.d(t,{hn:function(){return c},y$:function(){return r}});var i=o(85893),s=o(68785),n=o(56682);let a={id:"handover",title:"The 30-day handover, by who does what",desc:"Four phases across three lanes. Days 1 to 7, gather: you read the contract and secure admin access you own. Days 8 to 14, request: the outgoing provider sends documentation, licences and DNS details. Days 15 to 21, run in parallel: the new provider installs its tools and a restore is tested. Days 22 to 30, cut over and close: the outgoing provider's access is removed after the new provider's is confirmed, and you review on day 30.",phases:["Days 1 to 7: gather","Days 8 to 14: request","Days 15 to 21: overlap","Days 22 to 30: close"],lanes:[{id:"you",label:"Your firm",icon:"users",tone:"muted",head:"navy"},{id:"old",label:"Outgoing provider",icon:"building",tone:"page",head:"navy"},{id:"new",label:"New provider",icon:"wrench",tone:"tint",head:"blue"}],steps:[{phase:"Days 1 to 7: gather",lane:"you",text:"Read the contract for the term, notice and exit terms, and secure two break-glass admin accounts you own",icon:"document"},{phase:"Days 1 to 7: gather",lane:"old",text:"Nothing yet. Give notice only once you know the terms and the new provider's start date leaves an overlap",icon:"clock"},{phase:"Days 1 to 7: gather",lane:"new",text:"Agrees a start date that leaves an overlap, and an onboarding plan with documentation as a deliverable",icon:"calendar"},{phase:"Days 8 to 14: request",lane:"you",text:"Send one written handover request, and export every DNS zone before anything changes",icon:"mail"},{phase:"Days 8 to 14: request",lane:"old",text:"Documentation, password vault, subscription list, registrar and DNS details, open tickets and incidents",icon:"clipboard"},{phase:"Days 8 to 14: request",lane:"new",text:"Sends the relationship request and, once agreed with both sides, the subscription transfer request",icon:"licence"},{phase:"Days 15 to 21: overlap",lane:"you",text:"Redirect backup, security and monitoring alerts so someone receives them on the first day",icon:"alert"},{phase:"Days 15 to 21: overlap",lane:"old",text:"Approves the subscription transfer; keeps its backups running until the new ones are proved",icon:"vault"},{phase:"Days 15 to 21: overlap",lane:"new",text:"Installs its tools before the old ones come off, and tests a restore from the backup that will continue",icon:"restore"},{phase:"Days 22 to 30: close",lane:"you",text:"Change every password the outgoing provider knew, and review on day 30: anything missed, tickets still open",icon:"key"},{phase:"Days 22 to 30: close",lane:"old",text:"Admin roles, Azure role assignments, guest accounts and remote tools removed; data deletion confirmed in writing",icon:"lock"},{phase:"Days 22 to 30: close",lane:"new",text:"Confirms its own access works first. Then the outgoing provider's access is removed, not before",icon:"tick"}],note:"An order, not a deadline: a longer notice period means you start gathering earlier, not that the steps change. This is a template; your contract decides the terms."},r=()=>(0,i.jsx)(s._,{spec:a}),d={id:"days30",title:"Thirty days, with the overlap in the middle",desc:"A thirty-day line. The overlap, days 15 to 21, is shaded: both providers have access while the new tools go on, a restore is tested and the subscription transfer is approved. Access is removed only after day 22, and the review is on day 30.",span:30,ticks:[0,7,14,21,30].map(e=>({at:e,label:0===e?"Day 1":`Day ${e}`})),bands:[{from:14,to:21,tone:"tint"},{from:21,to:30,tone:"ok"}],markers:[{at:2,label:"Contract read; admin access you own",tone:"navy",width:120},{at:9,label:"Handover request sent; DNS exported",tone:"blue",width:120,row:1},{at:18,label:"Overlap: restore tested",tone:"blue",width:110},{at:24,label:"Outgoing access removed",tone:"ok",width:110,row:1},{at:30,label:"Day 30 review",tone:"navy",anchor:"end",width:90}],note:"Both providers have access during the overlap. Removing the old access before the new provider's works leaves nobody able to administer the estate.",height:150},c=()=>(0,i.jsx)(n.T,{spec:d})},18143:function(e,t,o){"use strict";o.d(t,{Z:function(){return l}});var i=o(85893),s=o(24264),n=o(6156),a=o(81880),r=o(46051),d=o(13893);let c=e=>r.SA[e-1];var l={slug:"it-provider-handover-checklist",kind:"Checklist",checked:r.ri,checkedAgainst:"Microsoft Learn",cover:{title:{plain:"Switching provider:",accent:"the 30-day handover"},subtitle:`${r.Yn} checks in the order to do them: before notice, the request, the overlap and the cutover.`,shareSubtitle:`${r.Yn} checks in the order to do them, from the notice period to the day 30 review.`,scene:{src:"/_next/static/media/scene-it-provider-handover-checklist.232f8ffe.png",height:1652,width:2467,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAFCAYAAAB4ka1VAAAAn0lEQVR42mNIr2hjZgCC7NoetcYpS95kV3dEgvhTjr9lYwCBJWffMIJon6QSB8+ojL9xpR2fp63Ytqp81nZ7sAIpUT4uIKVva6xiE+RpER9S3H07uWbi/9CM8g/OoSkuDCbWDpZABTmTFm/Ys3L/xT/m9Wt/WaS0vtM2sVkpLK/uyOAbnwuySyY6vz47uXXhPSX3lOlAvh0QizMwMDACAMW7NXSDNXJiAAAAAElFTkSuQmCC",blurWidth:8,blurHeight:5},sceneStyle:{portrait:{top:368,width:760},share:{top:70,width:560,right:10},a4:{top:"104mm",width:"168mm"}},panels:[{icon:"clipboard",title:`Eight areas, ${r.Yn} checks`,text:"Contract, admin access, documentation, licences, domain and DNS, backups, security tooling and the cutover, with tick boxes you can fill in."},{icon:"route",title:"The order to do it in",text:"Thirty days in four phases, by who does what: your firm, the outgoing provider and the new one, with the overlap in the middle."},{icon:"mail",title:"The request and the register",text:"What to ask the outgoing provider for, in one written request, and a handover register you can type into."}]},heroFacts:[{icon:"clipboard",text:`${r.Yn} checks across eight areas`},{icon:"route",text:"Thirty days, four phases, by who does what"},{icon:"mail",text:"The handover request, and a register to fill in"}],gateBlurb:"The 30-day order by who does what, tick boxes for every check, the handover request and a register you can type into.",aside:{heading:"Changing provider and want a clear picture first?",text:"The Microsoft estate review maps what you are licensed for, what is switched on and where the gaps are: 45 minutes, plus a written summary within three working days.",href:"/book/microsoft-estate",label:"Book the Microsoft estate review"},closeBullets:["45 minutes, plus a written summary within three working days","What you are licensed for against what is assigned and used, and the security gaps ranked by how much risk each one removes","A prioritised list of what we would fix first, and what can wait"],introNote:`Work through it in order: sections 1 and 2 before notice is given, 3 to 5 while you request the handover, 6 and 7 in the overlap, and 8 at the end. The Microsoft partner and subscription transfer steps were checked against Microsoft Learn on ${r.ri}. This is a template, not legal advice: adapt it to your organisation and your contract.`,introCallout:{title:"Ownership first, notice second",paragraphs:["You should own your Microsoft tenant and your domain registration, hold your own break-glass Global Administrator credentials that the provider does not control, and know what happens to documentation, passwords, monitoring agents and backups at the end of the term.","Confirm those before notice is given. Notice is the point after which the outgoing provider has the least reason to help, and the handover peri

1od needs to be measured in weeks, with documentation as a deliverable."]},pages:[{label:"The order",caption:"The 30-day handover, by who does what: gather, request, overlap, close",land:!0,body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"How it fits together",title:"Thirty days, in four phases",lead:"Your firm, the outgoing provider and the new one, phase by phase. The overlap in the middle is the point: both providers have access while the new tools go on and a restore is proved."}),(0,i.jsx)(a.RQ,{children:(0,i.jsx)(d.y$,{})}),(0,i.jsxs)("div",{className:a.S0.cols2,style:{marginTop:"4mm"},children:[(0,i.jsxs)("div",{className:a.S0.callout,children:[(0,i.jsx)("h3",{className:a.S0.h3,children:"Before notice"}),(0,i.jsx)("p",{className:a.S0.p,style:{marginBottom:0},children:"Sections 1 and 2. Know the terms, and hold the admin accounts that let you run the estate whatever happens next."})]}),(0,i.jsxs)("div",{className:a.S0.callout,children:[(0,i.jsx)("h3",{className:a.S0.h3,children:"After the overlap"}),(0,i.jsx)("p",{className:a.S0.p,style:{marginBottom:0},children:"Section 8. Remove the outgoing providerâs access only once the new providerâs works, then change every password it knew."})]})]})]})},{label:"Sections 1 to 3",caption:"Sections 1 to 3: the contract and the notice period, admin access you own, documentation",fields:"checks",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Days 1 to 14: before notice, and the request",title:"The contract, access and documentation",lead:"What the contract says about the end, the accounts that let you run the estate whatever happens next, and the estate written down as it is today."}),(0,i.jsx)(s.s6,{sections:[c(1),c(2),c(3)],dense:!0})]})},{label:"Sections 4 to 6",caption:"Sections 4 to 6: licences and subscriptions, domain and DNS, backups",fields:"checks",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Days 8 to 21: the request and the overlap",title:"Licences, DNS and backups",lead:"Every subscription with its term and who it is bought through, then the two things that quietly break mail and recovery when they change hands."}),(0,i.jsx)(s.s6,{sections:[c(4),c(5),c(6)],dense:!0})]})},{label:"Sections 7 and 8",caption:"Sections 7 and 8: security tooling and monitoring, cutover and close, and the thirty days on one line",fields:"checks",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Days 15 to 30: overlap and close",title:"Tooling, then the cutover",lead:"New tools on before the old come off, alerts redirected, and access removed in the right order."}),(0,i.jsx)(s.s6,{sections:[c(7),c(8)]}),(0,i.jsx)(a.RQ,{cap:"An order, not a deadline. A longer notice period means you start gathering earlier.",children:(0,i.jsx)(d.hn,{})})]})},{label:"The request",caption:"The handover request to send the outgoing provider",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Day 8",title:"What to ask the outgoing provider for",lead:"One written request, sent once notice is given, so the answers arrive while there is still an overlap to use them in. Keep a copy with the contract."}),(0,i.jsxs)("div",{className:a.S0.callout,children:[(0,i.jsx)("h3",{className:a.S0.h3,children:"Please send us, by the date agreed"}),(0,i.jsx)(a.kE,{items:r.Z})]}),(0,i.jsxs)("div",{className:a.S0.callout,style:{marginTop:"4mm"},children:[(0,i.jsx)("h3",{className:a.S0.h3,children:"Three things to confirm before you send it"}),(0,i.jsx)(a.kE,{items:["You own the Microsoft tenant and the domain registration, and hold two break-glass Global Administrator accounts the provider does not control.","The new provider's start date leaves an overlap of at least a week, and both providers know the dates.","The old backups stay until the new ones have run and a restore from them has been proved."]})]})]})},{label:"Handover register",caption:"The handover register, fillable on screen",fields:"worksheet",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Keep with the contract",title:"Your handover register",lead:"The dates, names and decisions from the checklist on one page. The fields can be typed into on screen or written by hand."}),(0,i.jsx)(n.i,{fields:r.Zy,print:!0})]})}],closeHead:{kicker:"Where this leaves you",title:"Where handovers usually go wrong",lead:"Rarely on the technology. Usually on ownership and order: accounts in the wrong name, access removed too early, and copies deleted with the old contract."},closeBody:(0,i.jsx)(s.uC,{items:r.a5,print:!0}),pdf:{subject:"A 30-day checklist for switching IT provider: contract and notice, admin access, documentation, licences, domain and DNS, backups, security tooling and cutover.",keywords:"switching IT provider, MSP handover, IT support contract, notice period, Microsoft 365 partner relationships, CSP transfer, domain, DNS, backups"}}},71125:function(e,t,o){"use strict";o.d(t,{I9:function(){return d},LY:function(){return s},Nq:function(){return c},aD:function(){return u},oJ:function(){return h},ri:function(){return i},xy:function(){return l}});let i="5 October 2026",s=[{n:1,publisher:"DSIT and Home Office",title:"Cyber Security Breaches Survey 2025/2026",year:"2026",published:"30 April 2026",url:"https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026"},{n:2,publisher:"NCSC",title:"NCSC Annual Review 2025: incident management",year:"2025",published:"14 October 2025",url:"https://www.ncsc.gov.uk/collection/ncsc-annual-review-2025/chapter-01-cyber-threat-to-the-uk/incident-management"},{n:3,publisher:"NCSC",title:"NCSC Annual Review 2025: NCSC tools and services",year:"2025",published:"14 October 2025",url:"https://www.ncsc.gov.uk/collection/ncsc-annual-review-2025/chapter-02-resilience-at-scale/empowering-organisations-ncsc-tools-services"}],[n,a,r]=s,d=[{id:"any-breach",figure:"43%",label:"of UK businesses reported a cyber breach or attack in the last 12 months",quote:"Just over four in ten businesses (43%) and around three in ten charities (28%) reported having experienced any kind of cyber security breach or attack in the last 12 months.",source:n,visual:{kind:"units",value:43,caption:"43 in every 100 businesses"}},{id:"by-size",figure:"65%",label:"of medium-sized businesses, against 42% of micro businesses",quote:"medium (65%) and large (69%) businesses were more likely to have experienced a cyber breach or attack in the last 12 months compared to micro (42%) and small (46%) businesses.",source:n,visual:{kind:"bars",rows:[{label:"Micro",value:42},{label:"Small",value:46},{label:"Medium",value:65,strong:!0},{label:"Large",value:69}],caption:"Businesses reporting a breach or attack in the last 12 months, by size"}},{id:"phishing",figure:"38%",label:"of businesses experienced phishing, by far the most common attack",quote:"Phishing attacks remained the most prevalent type of breach or attack by far (experienced by 38% of businesses and 25% of charities)",source:n,visual:{kind:"units",value:38,caption:"38 in every 100 businesses"}},{id:"guidance",figure:"44%",label:"of businesses actively looked outside for cyber security guidance",quote:"More than four in ten businesses (44%), and almost three in ten charities (31%), reported actively seeking external information or guidance on cyber security from outside their organisation in the past year",source:n,visual:{kind:"units",value:44,caption:"44 in every 100 businesses"}},{id:"ncsc-incidents",figure:"204",label:"nationally significant incidents handled by the NCSC in a year, up from 89",quote:"This year NCSC IM received 1,727 incident tips from a combination of our own information flows and reports from partners and victims. These were triaged into 429 incidents requiring support from the NCSC IM team. This represents a similar total trend from the previous year. However, nationally significant incidents represent 48% (204) of all incidents, a significant increase from last year (89).",source:a,wide:!0,visual:{kind:"funnel",rows:[{label:"incident tips received",value:1727,display:"1,727"},{label:"incidents requiring NCSC support",value:429,display:"429"},{label:"nationally significant, 48% of incidents",value:204,display:"204"}

1,{label:"highly significant, 4% of incidents",value:18,display:"18"}],caption:"1 September 2024 to 31 August 2025. Highly significant: âAmongst this yearâs incidents, 4% (18) were categorised as highly significant in nature. This marks an almost 50% increase in highly significant incidents, an increase for the third consecutive year.â"}}],c=[{id:"board",figure:"31%",label:"of businesses have board-level responsibility for cyber security",quote:"Board-level responsibility for cyber security sat at 31% of businesses and 30% of charities and continued to be higher in larger businesses (68% of large businesses).",source:n,visual:{kind:"units",value:31,caption:"31 in every 100 businesses; 68 in every 100 large businesses"}},{id:"ir-plan",figure:"25%",label:"of businesses have a formal incident response plan",quote:"Formal incident response plans were less widespread (25% of businesses; 19% of charities), and these measures were more prevalent in larger organisations (for example, 57% of medium-sized businesses and 76% of large businesses had a formal incident response plan, compared with 21% of micro businesses).",source:n,visual:{kind:"bars",rows:[{label:"Micro",value:21},{label:"All businesses",value:25,strong:!0},{label:"Medium",value:57},{label:"Large",value:76}],caption:"Businesses with a formal incident response plan"}},{id:"suppliers",figure:"15%",label:"of businesses reviewed the cyber risks posed by their immediate suppliers",quote:"Just over one in ten businesses said they reviewed the risks posed by their immediate suppliers (15%) and under one in ten were looking at their wider supply chain (6%).",source:n,visual:{kind:"units",value:15,caption:"15 in every 100 businesses; 6 looked at the wider supply chain"}},{id:"insurance",figure:"47%",label:"of businesses are insured against cyber security risks in some way",quote:"Almost half of businesses (47%) and a third of charities (35%) reported being insured against cyber security risks in some way.",source:n,visual:{kind:"units",value:47,caption:"47 in every 100 businesses"}},{id:"ai",figure:"31%",label:"of businesses using or considering AI have no plans to manage its security risks",quote:"Just under a third of those using or considering using AI reported having no plans to implement security practices to manage the risks of AI (31% of businesses and 28% of charities).",source:n,visual:{kind:"units",value:31,caption:"31 in every 100 of those businesses"}},{id:"cyber-essentials",figure:"5%",label:"of businesses hold Cyber Essentials, up from 3%",quote:"The proportion of businesses holding Cyber Essentials has increased since 2024/2025 (5% up from 3% in 2024/2025).",source:n,visual:{kind:"change",from:"2024/2025",to:"2025/2026",rows:[{label:"Businesses",from:3,to:5}],caption:"Source 3, NCSC Annual Review 2025: âdata from the Cyber Essentials Insurance company tells us that organisations with Cyber Essentials are 92% less likely to make a claim on their insurance.â"}}],l={claims:"data from the Cyber Essentials Insurance company tells us that organisations with Cyber Essentials are 92% less likely to make a claim on their insurance.",growth:"In recent years this has accelerated, with certification rates increasing by over 17% in the last year.",source:r},h=[{n:1,title:"Who owns it",icon:"users",items:["Someone at board level is responsible for cyber security (UK businesses: 31%; large businesses: 68%)","We know where we would go for outside guidance, and have used it in the last year (UK businesses: 44%)"]},{n:2,title:"When it happens",icon:"alert",items:["We have a formal incident response plan, written down (UK businesses: 25%; medium: 57%; large: 76%)","We are insured against cyber security risks in some way, and know what the policy expects of us (UK businesses: 47%)"]},{n:3,title:"The controls behind it",icon:"shield",items:["We hold Cyber Essentials, or know what would fail it today (UK businesses holding it: 5%)","We have reviewed the cyber risks posed by our immediate suppliers (UK businesses: 15%; wider supply chain: 6%)","We have security practices in place for the AI tools we use or are considering (31% of those businesses have no plans to)","We would know about a phishing attempt that got through, and what was clicked (38% of businesses experienced phishing in the year)"]}],u=h.reduce((e,t)=>

1e+t.items.length,0)},82492:function(e,t,o){"use strict";o.d(t,{t:function(){return d},Z:function(){return c}});var i=o(85893),s=o(24264),n=o(72659),a=o(81880),r=o(71125);let d=[{when:`All ${r.aD} ticked`,verdict:"On these measures you are ahead of most UK businesses the survey counted. Keep the evidence for each tick somewhere a customer or insurer could be shown it.",tone:"ok"},{when:"Five to seven ticked",verdict:"Better than the UK figure on most lines. In the survey the two least common are a supplier review (15%) and a formal incident response plan (25%), so check those two first.",tone:"navy"},{when:"Four or fewer ticked",verdict:"You are where most UK businesses are, and 43% of them reported a breach or attack last year. Start with ownership at board level and a written incident response plan.",tone:"warn"},{when:"Not sure how to answer a line",verdict:"Treat it as unticked. A control nobody can confirm is the one that turns out not to be there on the day.",tone:"bad",icon:"search"}];var c={slug:"uk-sme-cyber-stat-sheet",kind:"Stat sheet",checked:r.ri,checkedAgainst:"DSIT, Home Office and NCSC",cover:{title:{plain:"UK SME cyber",accent:"stat sheet 2026"},subtitle:"Eleven figures from the official Cyber Security Breaches Survey and the NCSC Annual Review, each quoted in the publisher's own words, then a page to see how your business compares.",shareSubtitle:"Eleven sourced figures from the Cyber Security Breaches Survey and the NCSC, and how your business compares.",scene:{src:"/_next/static/media/scene-uk-sme-cyber-stat-sheet.5eab1d3f.png",height:1741,width:2365,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAGCAYAAAD+Bd/7AAAAuklEQVR42mMAgfYjXwNvff0v/f//f/bsRWdYGICAR82UESypk9anbpAzY2rjtjsT1l7/Uvr9/3/+1///czDAgGBYg61mZMMrn+Z1/9OWXf7QtfNWYe/MOZbVtbXK0cUdYNOkgDjeNiBti3fxjP9BXdv/p0zbdSytZ+l0KS3DUAY2USV1BlbOaKCiGB4Ghlq70IKzgXVL/vsBFbKZh09jAAN+IyY1EycJIEsGiCUc3CMCjYJL7zOYx8wAAEvaRLMih3oxAAAAAElFTkSuQmCC",blurWidth:8,blurHeight:6},sceneStyle:{portrait:{top:420,width:600},share:{top:120,width:560,right:10},a4:{top:"102mm",width:"150mm"}},panels:[{icon:"chart",title:"Eleven sourced figures",text:"Breaches by business size, phishing, board ownership, incident plans, suppliers, insurance, AI and Cyber Essentials."},{icon:"clipboard",title:"How do you compare?",text:`${r.aD} tick boxes, each with the UK business figure beside it, so you can see where you sit in a few minutes.`},{icon:"document",title:"Every source linked",text:"Publisher, title and year on every tile; the full URLs on the sources page, re-checked on the date below."}]},heroFacts:[{icon:"chart",text:"Eleven figures, each quoted exactly"},{icon:"clipboard",text:`${r.aD} ticks against the UK figures`},{icon:"document",text:"Publisher, title, year and URL for every one"}],gateBlurb:"Two pages of sourced statistic tiles, a comparison page you can tick, and the sources.",aside:{heading:"Want to know where you actually stand?",text:"The free security posture review checks identity, endpoints, email and backup against what attacks actually exploit: 45 minutes, plus a written summary within three working days.",href:"/book/security-posture",label:"Book the security posture review"},closeBullets:["45 minutes, plus a written summary within three working days","What your existing licences already cover and which of it is switched off, with the identity, endpoint, email and backup gaps ranked by risk removed per pound","A plain answer on whether you would pass Cyber Essentials today, and what we would do first"],introNote:`Every figure is the publisher's own sentence, quoted in full under the number, with the publisher, title and year on the tile and the URL on the sources page. The wording was re-checked against each source on ${r.ri}.`,introCallout:{title:"Reading the business sizes",paragraphs:["The survey splits businesses into micro (1 to 9 employees), small (10 to 49), medium (50 to 249) and large (250 or more). Where it breaks a figure down by size, the tile shows the breakdown, because the average hides most of the story.","The NCSC figures cover the year from 1 September 2024 to 31 August 2025. Fieldwork for the survey ran from August to December 2025."]},pages:[{label:"How often, and how",caption:"The spread, page one: how often, and how",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"The spread, page one",title:"How often, and how",lead:"How many UK businesses report a breach or attack, how that changes with size, what the attacks are, and what reaches the National Cyber Security Centre."}),(0,i.jsx)(n.ud,{tiles:r.I9,print:!0})]})},{label:"How prepared",caption:"The spread, page two: how prepared",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"The spread, page two",title:"How prepared",lead:"Who owns cyber security, who has a plan for the day it happens, who checks their suppliers, who is insured, and who holds Cyber Essentials."}),(0,i.jsx)(n.ud,{tiles:r.Nq,print:!0})]})},{label:"How do you compare?",caption:"How do you compare? Ticks against the UK figures, and the sources",fields:"checks",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Your business",title:"How do you compare?",lead:"Tick each line only if you could show it to a customer or an insurer today. The UK business figure is beside every line."}),(0,i.jsx)(s.s6,{sections:r.oJ,dense:!0}),(0,i.jsx)("h3",{className:a.S0.h3,children:"Sources"}),(0,i.jsx)(n.kb,{sources:r.LY,checked:r.ri,print:!0})]})}],closeHead:{kicker:"Reading your ticks",title:"What your ticks add up to",lead:`Count the lines you ticked on the comparison page, out of ${r.aD}.`},closeBody:(0,i.jsx)(s.uC,{items:d,print:!0}),pdf:{subject:"Sourced UK cyber security statistics for small and medium businesses, from the Cyber Security Breaches Survey 2025/2026 and the NCSC Annual Review 2025.",keywords:"UK cyber security statistics, Cyber Security Breaches Survey 2025/2026, NCSC Annual Review 2025, SME cyber security, Cyber Essentials"}}},39889:function(e,t,o){"use strict";o.d(t,{LU:function(){return a},O2:function(){return c},PB:function(){return r},V0:function(){return h},VT:function(){return l},aL:function(){return s},hw:function(){return d},ri:function(){return i},yl:function(){return n}});let i="5 October 2026",s="https://learn.microsoft.com/windows-365/enterprise/gpu-cloud-pc",n="19 May 2026",a={cloud:"cloudHosts",w365:"cloudPc",local:"azureLocal",hybrid:"hypervisor",rds:"windowsServer",citrix:"broker",ras:"layers",review:"scale",gpu:"monitor"},r=[{id:"start",kind:"start",text:"List daily applications, where their data sits, and how they are delivered today",x:820,y:48},{id:"d0",kind:"decision",text:"Publishing applications to mixed back ends, or leaving Citrix?",x:820,y:176},{id:"dp",kind:"decision",text:"Very large estate, difficult networks or graphics-heavy work?",x:382,y:330},{id:"oCitrix",kind:"outcome",text:"Stay on Citrix, and negotiate the renewal",to:"citrix",x:140,y:330},{id:"oRas",kind:"outcome",text:"Parallels RAS: on-site and hybrid, licensed by concurrent user",to:"ras",x:382,y:480,h:84},{id:"d1",kind:"decision",text:"Do daily apps depend on on-site data that is staying?",x:976,y:330},{id:"d2",kind:"decision",text:"Running, or buying, Azure Local?",x:976,y:480},{id:"oLocal",kind:"outcome",text:"AVD on Azure Local",to:"local",x:726,y:480},{id:"d3",kind:"decision",text:"Does RDS work, on a supported Windows Server?",x:976,y:630},{id:"oRds",kind:"outcome",text:"Stay on RDS and fix the estate",to:"rds",x:726,y:630},{id:"d4",kind:"decision",text:"Hardware with life left?",x:976,y:780},{id:"oHybrid",kind:"outcome",text:"AVD Hybrid. Name who patches and powers the hosts",to:"hybrid",x:726,y:780,h:84},{id:"oNew",kind:"outcome",text:"New spend against new spend: compare a refresh and the cloud fairly",to:"review",x:976,y:892,w:250,h:62},{id:"d5",kind:"decision",text:"Graphics-heavy work: design, rendering or 3D?",x:1262,y:480},{id:"oGpu",kind:"outcome",text:"Windows 365 Enterprise GPU Cloud PCs, or GPU hosts on cloud AVD",to:"gpu",x:1512,y:480,h:92},{id:"d6",kind:"decision",text:"Is demand uneven: busy days, quiet nights?",x:1262,y:630},{id:"oCloud",kind:"outcome",text:"Cloud AVD, with autoscale configured",to:"cloud",x:1512,y:630}

1,{id:"d7",kind:"decision",text:"No infrastructure, steady headcount, a desktop each?",x:1262,y:780},{id:"oW365",kind:"outcome",text:"Windows 365",to:"w365",x:1512,y:780},{id:"oPooled",kind:"outcome",text:"Cloud AVD, pooled multi-session, run by your team or a partner",to:"cloud",x:1262,y:892,w:250,h:62}],d=[{from:"start",to:"d0"},{from:"d0",to:"dp",label:"Yes",via:[[382,176]]},{from:"dp",to:"oCitrix",label:"Yes"},{from:"dp",to:"oRas",label:"No"},{from:"d0",to:"d1",label:"No",via:[[976,176]]},{from:"d1",to:"d2",label:"Yes"},{from:"d2",to:"oLocal",label:"Yes"},{from:"d2",to:"d3",label:"No"},{from:"d3",to:"oRds",label:"Yes"},{from:"d3",to:"d4",label:"No"},{from:"d4",to:"oHybrid",label:"Yes"},{from:"d4",to:"oNew",label:"No"},{from:"d1",to:"d5",label:"No",via:[[1262,330]]},{from:"d5",to:"oGpu",label:"Yes"},{from:"d5",to:"d6",label:"No"},{from:"d6",to:"oCloud",label:"Yes"},{from:"d6",to:"d7",label:"No"},{from:"d7",to:"oW365",label:"Yes"},{from:"d7",to:"oPooled",label:"No"}],c="Going native to AVD or Windows 365 instead of a third-party broker? You keep the desktops and lose the console that showed cost, usage and posture. Decide the management layer at the point of migration, not six months afterwards.",l=[{id:"cloud",name:"Cloud AVD",runs:"Session hosts in Azure, brokered by Microsoft. Pooled multi-session or personal desktops",licensing:"Eligible Microsoft 365 or Windows licence, plus Azure compute and storage by consumption",bestWhen:"The data is in the cloud or can be, and demand varies",watchFor:"A host placed far from on-site data makes every query a round trip",source:"Decision guide"},{id:"w365",name:"Windows 365",runs:"Microsoft-hosted Cloud PCs, one per user. Enterprise offers GPU Cloud PCs",licensing:"A Windows 365 licence per user, at a fixed monthly fee",bestWhen:"You want predictable cost and no infrastructure",watchFor:"Bought for a workforce that signs in half the week, it pays for capacity nobody uses",source:"Decision guide; Microsoft Learn"},{id:"hybrid",name:"AVD Hybrid",runs:"Your own hypervisor or headless physical servers, Arc-enabled. The AVD service stays in Azure",licensing:"The same entitlements, plus an AVD Hybrid service user licence",bestWhen:"Apps need on-site data and you have hardware with life left",watchFor:"No Windows 11 multi-session, and no power management, autoscale or Start VM on Connect",source:"Decision guide"},{id:"rds",name:"Remote Desktop Services",runs:"Your own Windows Server machines. You run the RD Connection Broker",licensing:"RDS CAL per user or device",bestWhen:"The estate works and nothing needs to change yet",watchFor:"Windows Server 2016 extended support ends on 12 January 2027",source:"Decision guide"},{id:"citrix",name:"Citrix",runs:"Broad back ends, plus deep ecosystem integration. HDX, strongest over poor networks and for graphics",licensing:"Bundled subscription, named user, minimum seat commitment",bestWhen:"Very large estates, difficult networks, graphics-heavy work",watchFor:"The bundle and seat floor exceed what the estate uses",source:"Citrix vs Parallels RAS vs AVD"},{id:"ras",name:"Parallels RAS",runs:"RDSH, VDI, Azure and AVD across VMware, Hyper-V, Nutanix and Scale",licensing:"Single product, concurrent user",bestWhen:"On-premises and hybrid estates, published applications, variable concurrency",watchFor:"Very large scale, or HDX-class protocol performance required",source:"Citrix vs Parallels RAS vs AVD"}],h=[{situation:"Our Citrix renewal came back far higher, and we publish a dozen applications to a partly part-time workforce.",answer:"Parallels RAS, on the infrastructure you already have. Solve the renewal now and decide about Azure later, on its merits.",to:"ras"},{situation:"Thousands of seats, poor site links, and CAD users.",answer:"Stay on Citrix and negotiate. HDX is ahead over poor networks and for graphics-heavy work.",to:"citrix"},{situation:"Our apps talk to a database in the building and the servers are three years old.",answer:"AVD Hybrid, or stay on RDS. Plan who patches and powers the hosts.",to:"hybrid"},{situation:"Everything is in Microsoft 365, headcount is steady, and we do not want servers.",answer:"Windows 365.",to:"w365"},{situation:"Usage is heavy in the day and almost nothing at night, and the data is in Azure.",answer:"Cloud AVD, with autoscale configured.",to:"cloud"},{situation:"Our designers need a GPU, and so does everyone in the drawing office.",answer:"Windows 365 Enterprise GPU Cloud PCs, or cloud AVD where every user needs the exact same GPU configuration.",to:"gpu"}]},88482:function(e,t,o){"use strict";o.d(t,{Ft:function(){return c},YE:function(){return u},mO:function(){return h}});var i=o(85893),s=o(56623),n=o(359),a=o(39889);let r=e=>"review"===e.to?"dark":"cloud"===e.to||"w365"===e.to||"gpu"===e.to?"tint":"muted",d={id:"wvd",width:1640,height:940,title:"Which virtual desktop: a decision flowchart",desc:"Start by listing daily applications, where their data sits and how they are delivered. If you publish applications to mixed back ends or are leaving Citrix: a very large estate, difficult networks or graphics-heavy work points to staying on Citrix, otherwise Parallels RAS. If data stays on site: Azure Local points to AVD on Azure Local, a working supported RDS estate to staying on RDS, hardware with life left to AVD Hybrid, otherwise compare new spend against new spend. If data is in the cloud: graphics-heavy work points to Windows 365 Enterprise GPU Cloud PCs or GPU hosts on cloud AVD, uneven demand to cloud AVD with autoscale, no infrastru

1cture and steady headcount to Windows 365, otherwise pooled cloud AVD.",sizes:{decision:{w:190,h:108},outcome:{w:196,h:76},start:{w:660,h:48}},regions:[{x:24,y:262,w:478,h:668,label:"Publishing applications, or leaving Citrix",tone:"muted"},{x:612,y:262,w:506,h:668,label:"Data stays in your building",tone:"muted"},{x:1130,y:262,w:496,h:668,label:"Data in the cloud, or moving there",tone:"tint"}],nodes:a.PB.map(e=>({id:e.id,kind:e.kind,text:e.text,x:e.x,y:e.y,w:e.w,h:e.h,icon:"outcome"===e.kind?a.LU[e.to??"review"]:"document",tone:r(e)})),edges:a.hw,note:{x:46,y:560,width:430,text:a.O2}},c=()=>(0,i.jsx)(n.C,{spec:d}),l={caption:"Six virtual desktop platforms compared on where they run, licensing, best fit and what to watch for",columns:a.VT.map(e=>({label:e.name,icon:a.LU[e.id],tone:"cloud"===e.id||"w365"===e.id?"tint":"muted"})),rows:[{head:"Where it runs",cells:a.VT.map(e=>e.runs)},{head:"Licensing",cells:a.VT.map(e=>e.licensing)},{head:"Best when",cells:a.VT.map(e=>e.bestWhen)},{head:"Watch for",cells:a.VT.map(e=>e.watchFor)},{head:"From",cells:a.VT.map(e=>e.source)}]},h=e=>{let{print:t=!1,dense:o=!1}=e;return(0,i.jsx)(s.q,{spec:l,print:t,dense:o})},u=a.V0.map(e=>({when:`â${e.situation}â`,verdict:e.answer,tone:"navy",icon:a.LU[e.to]}))},64877:function(e,t,o){"use strict";o.d(t,{Z:function(){return c}});var i=o(85893),s=o(77637),n=o(81880),a=o(39889),r=o(88482);let d="systechitsolutions.co.uk";var c={slug:"which-virtual-desktop",kind:"Decision infographic",checked:a.ri,checkedAgainst:"Microsoft Learn and our comparison guides",cover:{title:{plain:"Which virtual",accent:"desktop?"},subtitle:"Cloud AVD, AVD on Azure Local, AVD Hybrid, Windows 365, Remote Desktop Services, Citrix and Parallels RAS: one flowchart to the answer, and the six platforms side by side.",shareSubtitle:"AVD, Windows 365, AVD Hybrid, RDS, Citrix and Parallels RAS: one flowchart to the answer.",scene:{src:"/_next/static/media/scene-which-virtual-desktop.22e17141.png",height:1598,width:2710,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAFCAYAAAB4ka1VAAAAsElEQVR4nAGlAFr/AbbJ3wjFz9orGQ3/zSwrJqTX2NvW2/YPnD8rFpU0LiGSAUhpiTDy9PWhxtHQXlpDOYSuzNf3hWNTvScoJ5gODg1vAQAfOEEADA5kEBIXBQIVHRcaCQUC1MLN3QDjtOMAAAChAQEAADAJAAAz9gAA+z5adE77/P3/x6qPtSIgGwgNFB3OAQAAAAAjMkAd3c7AFVtwhkr///8AppF7tic1QurZy77kLDRC/ihdLboAAAAASUVORK5CYII=",blurWidth:8,blurHeight:5},sceneStyle:{portrait:{top:440,width:760},share:{top:116,width:560,right:10},a4:{top:"104mm",width:"178mm"}},panels:[{icon:"route",title:"One flowchart",text:"Published applications, data on site or data in the cloud: nine questions from your estate to one of ten outcomes."},{icon:"layers",title:"Six platforms compared",text:"Where each runs, how it is licensed, when it fits best and what to watch for, with the page each line comes from."},{icon:"monitor",title:"Graphics included",text:`Windows 365 Enterprise GPU Cloud PCs or GPU hosts on cloud AVD, checked against Microsoft Learn (${a.yl}).`}]},heroFacts:[{icon:"route",text:"One flowchart, ten outcomes"},{icon:"layers",text:"Six platforms side by side"},{icon:"monitor",text:"GPU and Citrix branches included"}],gateBlurb:"The decision flowchart, the six-platform comparison and six quick reads, on A4.",aside:{heading:"Still split between two?",text:"The free virtual desktop review sizes the options against measured usage rather than headcount: 45 minutes, plus a written sizing and cost summary within three working days.",href:"/book/virtual-desktop",label:"Book the virtual desktop review"},closeBullets:["45 minutes, plus a written sizing and cost summary within three working days","Your pool sizing against measured concurrency rather than headcount, and where the storage tier and image strategy are costing you, in pounds","A straight answer on AVD, Windows 365 or a mix, and why. If virtual desktop is the wrong shape for you, the review will say so"],introNote:`The flowchart is a lean, not a verdict: if two or three answers point the same way, that is usually the answer. For the seven criteria behind it, the licensing basis and what the monthly cost really includes, use the full decision guide at ${d}/resources/avd-w365-hybrid-decision-guide.`,introCallout:{title:"Two things to know first",paragraphs:["AVD Hybrid is not Azure Local. Both keep the AVD service in Azure with session hosts on site, but AVD Hybrid runs on the hypervisor or physical servers you already have, through Azure Arc, while AVD on Azure Local runs on Microsoft's own on-premises platform.","Citrix and Parallels RAS answer a slightly different question: publishing applications to mixed back ends. That branch comes first, because it is usually the renewal that starts the conversation."]},pages:[{label:"Decision flowchart",caption:"The decision flowchart",land:!0,body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.Fb,{kicker:"From your estate to an answer",title:"Which virtual desktop?",lead:"Start with how applications are delivered today, then where their data lives. Each diamond is a question about your estate; each outcome is a platform, or a fair comparison where new spend meets new spend."}),(0,i.jsx)(n.RQ,{children:(0,i.jsx)(r.Ft,{})}),(0,i.jsxs)("p",{className:n.S0.small,children:["GPU: Microsoft Learn, GPU Cloud PCs in Windows 365, ",a.yl,": four GPU offerings for Windows 365 Enterprise and Flex Cloud PCs; for exactly the same GPU configuration for every user, Microsoft points to Azure Virtual Desktop. ",a.aL.replace("https://","")]})]})},{label:"Six platforms compared",caption:"Six platforms compared, side by side",land:!0,body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(n.Fb,{kicker:"Side by side",title:"Six platforms compared",lead:"Where each runs, how it is licensed, when it fits best and what to watch for. AVD on Azure Local is

1in the flowchart and in the full decision guide."}),(0,i.jsx)(r.mO,{print:!0}),(0,i.jsxs)("p",{className:n.S0.small,children:["From our decision guide at ",d,"/resources/avd-w365-hybrid-decision-guide (checked against Microsoft Learn, 4 October 2026), our comparison at ",d,"/compare/citrix-vs-parallels-ras-vs-avd, and Microsoft Learn for the GPU line (",a.yl,")."]})]})}],closeHead:{kicker:"Quick reads",title:"Common situations",lead:"Six estates we see often, and where the flowchart usually lands them."},closeBody:(0,i.jsx)("ul",{className:n.S0.quick,children:a.V0.map((e,t)=>(0,i.jsxs)("li",{children:[(0,i.jsx)("span",{className:n.S0.quickIcon,children:(0,i.jsx)(s.JO,{name:a.LU[e.to],size:18,color:"#0b6db6"})}),(0,i.jsxs)("div",{children:[(0,i.jsxs)("p",{className:n.S0.quickQ,children:["â",e.situation,"â"]}),(0,i.jsx)("p",{className:n.S0.quickA,children:e.answer})]})]},t))}),pdf:{subject:"A decision flowchart and comparison across Azure Virtual Desktop, Windows 365, AVD Hybrid, Remote Desktop Services, Citrix and Parallels RAS.",keywords:"Azure Virtual Desktop, Windows 365, AVD Hybrid, Remote Desktop Services, Citrix, Parallels RAS, virtual desktop decision"}}},17538:function(e,t,o){"use strict";o.d(t,{BY:function(){return s},Fe:function(){return m},LP:function(){return u},O2:function(){return c},PB:function(){return r},Z6:function(){return y},Zy:function(){return w},cu:function(){return h},dh:function(){return n},dt:function(){return p},hw:function(){return d},rE:function(){return a},ri:function(){return i},wv:function(){return l}});let i="5 October 2026",s="https://learn.microsoft.com/windows/whats-new/extended-security-updates",n="https://learn.microsoft.com/windows/whats-new/windows-11-requirements",a={w11:"laptop",firmware:"wrench",esu:"clock",cloudpc:"cloudPc",replace:"refresh"},r=[{id:"start",kind:"start",text:"Take one Windows 10 device still in service",x:700,y:46},{id:"d1",kind:"decision",text:"Meets the Windows 11 requirements: TPM 2.0, Secure Boot, UEFI, supported processor?",x:700,y:180},{id:"oW11",kind:"outcome",text:"Upgrade to Windows 11. The licence is usually already covered",to:"w11",x:1060,y:180,w:280,h:76},{id:"d2",kind:"decision",text:"Fails only because TPM or Secure Boot is switched off in firmware?",x:700,y:350},{id:"oFirm",kind:"outcome",text:"Switch it on, then upgrade: a settings change, not a purchase",to:"firmware",x:1060,y:350,w:280,h:76},{id:"d3",kind:"decision",text:"Tied to an application that only runs on Windows 10?",x:700,y:520},{id:"oEsu",kind:"outcome",text:"ESU for a defined period, and start fixing the application now",to:"esu",x:340,y:520,w:280,h:76},{id:"d4",kind:"decision",text:"Facing mass replacement, or work that suits a Cloud PC?",x:700,y:690},{id:"oCloud",kind:"outcome",text:"A Cloud PC. The device carries on as a thin client",to:"cloudpc",x:1060,y:690,w:280,h:76},{id:"oReplace",kind:"outcome",text:"Replace the device",to:"replace",x:340,y:690,w:280,h:76}],d=[{from:"start",to:"d1"},{from:"d1",to:"oW11",label:"Yes"},{from:"d1",to:"d2",label:"No"},{from:"d2",to:"oFirm",label:"Yes"},{from:"d2",to:"d3",label:"No"},{from:"d3",to:"oEsu",label:"Yes"},{from:"d3",to:"d4",label:"No"},{from:"d4",to:"oCloud",label:"Yes"},{from:"d4",to:"oReplace",label:"No"}],c="Run it for every device and most estates end up with all three: upgrade what qualifies, bridge the genuine blockers on ESU with an end date, and move the rest to Cloud PCs rather than replacing them.",l=[{label:"Year one",detail:"Microsoft Learn: $61 per device",value:61,valueLabel:"$61"},{label:"Year two",detail:"Doubles: about $122",value:122,valueLabel:"$122"},{label:"Year three",detail:"Doubles again: about $244",value:244,valueLabel:"$244"},{label:"All three years",detail:"Cumulative: you cannot skip a year",value:427,valueLabel:"$427"}],h="Microsoft Learn, ESU program for Windows 10 (17 November 2025), and our post Windows 10 ESU year two (24 August 2026)",u=["Learn: âThe price doubles every consecutive year, for a maximum of three years.â ESUs are cumulative: buying year two means paying for year one too.","Learn: âWindows 10 endpoints connecting to Windows 365 Cloud PCs will be entitled to the ESU for up to three years, with an active Windows 365 subscription license.â"],p=[{label:"Windows 10 ESU",icon:"clock"},{label:"Upgrade to Windows 11",icon:"laptop"},{label:"Move to a Cloud PC",icon:"cloudPc"}

1],m=[{head:"What it solves",cells:["Security patching only","Returns you to full support","Removes hardware as the constraint"]},{head:"Cost shape",cells:["Per device, per year, rising each year","Mostly project effort, plus replacement hardware","Ongoing per-user subscription"]},{head:"Hardware implications",cells:["None, runs on what you have","Non-qualifying devices must be replaced","Existing devices continue as thin clients"]},{head:"Immediate effort",cells:["Lowest","Moderate, concentrated in app testing","Highest, changes how the estate is run"]},{head:"How long it buys",cells:["Three years maximum, then nothing","A normal support lifecycle","Ongoing, no refresh cliff"]},{head:"New features",cells:["None","Yes","Yes"]},{head:"Best suited to",cells:["Devices with a specific unresolved blocker","Estates where most hardware qualifies","Estates facing mass replacement, or hybrid work"]}],w=[{label:"Windows 10 devices still in service"},{label:"Meet the Windows 11 requirements now",hint:"upgrade first"},{label:"Fail only on TPM or Secure Boot settings",hint:"switch on, then upgrade"},{label:"Tied to a Windows 10-only application",hint:"ESU, with an end date"},{label:"Users whose work suits a Cloud PC",hint:"keep the device as a thin client"},{label:"Devices to replace"},{label:"Applications blocking the upgrade, and who owns each",wide:!0},{label:"The date the last ESU device comes off ESU",wide:!0}],y=["Upgrade the qualifying devices first. It shrinks the problem immediately and cheaply.","Put a defined ESU period around the genuine blockers, so the exception has an end date rather than becoming permanent.","Evaluate Cloud PCs for the users and devices where replacement would otherwise be the only option."]},62405:function(e,t,o){"use strict";o.d(t,{Ft:function(){return h},L0:function(){return w},mO:function(){return f},w9:function(){return p}});var i=o(85893),s=o(45648),n=o(56623),a=o(359),r=o(56682),d=o(17538);let c=e=>"w11"===e.to||"firmware"===e.to?"ok":"esu"===e.to?"warn":"cloudpc"===e.to?"tint":"muted",l={id:"w10",width:1400,height:780,title:"Windows 10: decide by device",desc:"For each Windows 10 device: if it meets the Windows 11 requirements, upgrade. If it fails only because TPM or Secure Boot is switched off in firmware, switch it on and upgrade. If it is tied to an application that only runs on Windows 10, put it on ESU for a defined period and start fixing the application. If the estate faces mass replacement or the work suits a Cloud PC, move the user to a Cloud PC and keep the device as a thin client. Otherwise, replace the device.",sizes:{decision:{w:260,h:130},outcome:{w:280,h:76},start:{w:460,h:48}},regions:[{x:900,y:118,w:480,h:310,label:"Back to full support",tone:"tint"}],nodes:d.PB.map(e=>({id:e.id,kind:e.kind,text:e.text,x:e.x,y:e.y,w:e.w,h:e.h,icon:"outcome"===e.kind?d.rE[e.to??"replace"]:"laptop",tone:c(e)})),edges:d.hw,note:{x:60,y:150,width:360,text:d.O2}},h=()=>(0,i.jsx)(a.C,{spec:l}),u={id:"esu",title:"What ESU costs per device",subtitle:"Commercial Windows 10 Extended Security Updates, US dollars, per device",desc:`Four bars: year one $61, year two about $122, year three about $244, and about $427 across all three years. ${d.cu}.`,bars:d.wv.map((e,t)=>({label:e.label,detail:e.detail,value:e.value,valueLabel:e.valueLabel,kind:3===t?"b":"a"})),max:450,ticks:[0,100,200,300,400],tickLabel:e=>`$${e}`,legend:{a:"One year of ESU, per device",b:"All three years, per device"},notes:d.LP,source:d.cu,labelW:260,rowH:56},p=()=>(0,i.jsx)(s.H,{spec:u}),m={id:"w10dates",title:"Windows 10 and Windows Server 2016 dates",desc:"A timeline from October 2025 to October 2028. Windows 10 support ended on 14 October 2025; ESU runs for a maximum of three years from then. Windows Server 2016 extended support ends on 12 January 2027.",span:36,ticks:["Oct 2025","Oct 2026","Oct 2027","Oct 2028"].map((e,t)=>({at:12*t,label:e})),bands:[{from:0,to:36,tone:"warn"}],markers:[{at:0,label:"14 October 2025: Windows 10 support ended",tone:"bad",width:190},{at:12,label:"Checked, 5 October 2026",tone:"blue",anchor:"middle",row:1},{at:15.4,label:"12 January 2027: Windows Server 2016 extended supp

1ort ends",tone:"navy",width:200},{at:36,label:"ESU ends: three years maximum",tone:"bad",anchor:"end",width:170,row:1}],note:"Plan the desktop and the server together: the hard part in both is the same line-of-business applications.",height:150},w=()=>(0,i.jsx)(r.T,{spec:m}),y={caption:"Windows 10 ESU, upgrading to Windows 11 and moving to a Cloud PC compared",columns:d.dt.map((e,t)=>({label:e.label,icon:e.icon,tone:2===t?"tint":"muted"})),rows:d.Fe.map(e=>({head:e.head,cells:[...e.cells]}))},f=e=>{let{print:t=!1,dense:o=!1}=e;return(0,i.jsx)(n.q,{spec:y,print:t,dense:o})}},87409:function(e,t,o){"use strict";o.d(t,{G:function(){return l},Z:function(){return h}});var i=o(85893),s=o(24264),n=o(6156),a=o(81880),r=o(17538),d=o(62405);let c="systechitsolutions.co.uk",l=[{when:"First",verdict:r.Z6[0],tone:"ok",icon:"laptop"},{when:"Then",verdict:r.Z6[1],tone:"warn",icon:"clock"},{when:"And",verdict:r.Z6[2],tone:"navy",icon:"cloudPc"},{when:"Without ESU",verdict:"Unsupported software in scope is a hard fail for Cyber Essentials, so an estate still on Windows 10 without ESU will not certify.",tone:"bad",icon:"alert"}];var h={slug:"windows-10-decide-by-device",kind:"Decision infographic",checked:r.ri,checkedAgainst:"Microsoft Learn",cover:{title:{plain:"Windows 10:",accent:"decide by device"},subtitle:"ESU, Windows 11 or a Cloud PC, one device at a time: four questions per machine, what ESU really costs per device, and a page to count your estate.",shareSubtitle:"ESU, Windows 11 or a Cloud PC, one device at a time: four questions per machine.",scene:{src:"/_next/static/media/scene-windows-10-decide-by-device.dc794997.png",height:1324,width:2308,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAFCAYAAAB4ka1VAAAAm0lEQVR42mOYtf0SKwMURHVvKQ1pW+/LAAUp1f2MDIsf/5ecsf1iUkHnku26yT3/9aLq/wcV9J5gMPDXZgAB7cj6WWFFE/77Z7b+Z+A2m8VrGrLQOrryv0dC5X9e89AYBv2wyg4mm/hDDAwMpcIMDGkgkxkY5GskbaI2SRp5ODBAAZuGuooOA5uoAyOftIM4O4MOAwMDMwMDAwMA4vIr9I3X6c4AAAAASUVORK5CYII=",blurWidth:8,blurHeight:5},sceneStyle:{portrait:{top:440,width:760},share:{top:116,width:560,right:10},a4:{top:"104mm",width:"178mm"}},panels:[{icon:"route",title:"Four questions per device",text:"Requirements, firmware, a Windows 10-only application, and whether the work suits a Cloud PC."},{icon:"chart",title:"What ESU costs",text:"$61 per device for year one, doubling each year for at most three years, and cumulative. From Microsoft Learn."},{icon:"clipboard",title:"Count your devices",text:"The three routes side by side, and a worksheet to count each outcome across your estate."}]},heroFacts:[{icon:"route",text:"Four questions, five outcomes"},{icon:"chart",text:"ESU cost per device, from Microsoft Learn"},{icon:"clipboard",text:"A device count you can type into"}],gateBlurb:"The per-device flowchart, ESU cost and dates, the three routes compared and a fillable device count.",aside:{heading:"Blocked by an application?",text:"The free application compatibility assessment sorts your applications into the groups that actually matter before you commit budget: 45 minutes, plus a written application breakdown within three working days.",href:"/book/app-compatibility",label:"Book the compatibility assessment"},closeBullets:["45 minutes, plus a written application breakdown within three working days","Your applications sorted into four groups: converts cleanly, needs remediation, must be captured from a running install, or should be delivered another way","A straight answer on the ones that will never convert, and a realistic effort estimate per group"],introNote:`Windows 10 support ended on 14 October 2025. The facts here come from our comparison at ${c}/compare/windows-10-esu-vs-windows-11-vs-cloud-pc and Microsoft Learn, checked on ${r.ri}.`,introCallout:{title:"Start with one number",paragraphs:["What proportion of your devices meet the Windows 11 requirements? Until you know that, every option is speculation. Run the flowchart once per device, or once per model of device, and count the outcomes on the worksheet.","Some devices fail only because TPM or Secure Boot is switched off in firmware. A proper readiness scan usually reclaims a share of the estate a quick assumption would have written off."]},pages:[{label:"Decide by device",caption:"The per-device flowchart",land:!0,body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"One device at a time",title:"Windows 10: decide by device",lead:"Four questions per device. The first two return it to full support; the last two decide between a bridge, a Cloud PC and a replacement."}),(0,i.jsx)(a.RQ,{children:(0,i.jsx)(d.Ft,{})}),(0,i.jsxs)("p",{className:a.S0.small,children:["Windows 11 requirements: Microsoft Learn, ",r.dh.replace("https://",""),". The processor requirement is

1what excludes most otherwise serviceable machines."]})]})},{label:"The cost of waiting",caption:"What ESU costs per device, and the dates",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"The bridge",title:"What ESU costs, and how long it lasts",lead:"ESU buys security patches only: no new features, no non-security fixes and no general support. It is priced to escalate, and it ends whether or not the blocker is fixed."}),(0,i.jsx)(a.RQ,{children:(0,i.jsx)(d.w9,{})}),(0,i.jsx)(a.RQ,{cap:"ESU runs for at most three years from the end of Windows 10 support.",children:(0,i.jsx)(d.L0,{})}),(0,i.jsxs)("p",{className:a.S0.small,children:["Microsoft Learn, Extended Security Updates (ESU) program for Windows 10: ",r.BY.replace("https://",""),". Our post: ",c,"/blog/windows-10-esu-year-two-cost."]})]})},{label:"Three routes compared",caption:"The three routes compared",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Side by side",title:"The three routes compared",lead:"ESU buys time. Upgrading buys a supported estate. A Cloud PC changes the question, so the age of the laptop on the desk stops deciding which operating system you can run."}),(0,i.jsx)(d.mO,{print:!0}),(0,i.jsxs)("p",{className:a.S0.small,children:["From our comparison at ",c,"/compare/windows-10-esu-vs-windows-11-vs-cloud-pc."]})]})},{label:"Count your devices",caption:"Count your devices: a worksheet, fillable on screen",fields:"worksheet",body:(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(a.Fb,{kicker:"Your estate",title:"Count your devices",lead:"One box per outcome of the flowchart. The counts turn three routes into a plan with dates, and they are the numbers any supplier conversation should start from."}),(0,i.jsx)(n.i,{fields:r.Zy,print:!0})]})}],closeHead:{kicker:"The plan",title:"Usually a mix, with dates attached",lead:"Three moves, in this order, so the exceptions have end dates rather than becoming permanent."},closeBody:(0,i.jsx)(s.uC,{items:l,print:!0}),pdf:{subject:"Windows 10 Extended Security Updates, Windows 11 or a Cloud PC, decided one device at a time, with ESU costs from Microsoft Learn.",keywords:"Windows 10 end of support, Windows 10 ESU, Windows 11 upgrade, Windows 365 Cloud PC, Extended Security Updates cost"}}},91460:function(e,t,o){"use strict";o.r(t),o.d(t,{__N_SSG:function(){return f},config:function(){return g},default:function(){return b}});var i=o(85893),s=o(9008),n=o.n(s),a=o(77637),r=o(95699),d=o(81880),c=o(51626),l=o.n(c);let h="https://systechitsolutions.co.uk",u="systechitsolutions.co.uk",p="[email protected]";function m(e){let{r:t,m:o}=e,s=t.kind.toLowerCase(),n=`${o.title} \xb7 Systech IT Solutions`,c=[...t.pages.map((e,t)=>[e.label,t+3]),[t.closeHead.title,t.pages.length+3]],m=t.pages.length+3,w=function(e,o,s){let a=arguments.length>3&&void 0!==arguments[3]?arguments[3]:{};return(0,i.jsx)(d.T3,{label:e,running:n,total:m,checked:t.checked,cover:a.cover,land:a.land,last:s===m-1,children:o},s)};return(0,i.jsxs)("main",{className:l().doc,children:[w("Cover",(0,i.jsx)(r.V,{r:t,format:"a4"}),0,{cover:!0}),w(`How to use this ${s}`,(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(d.Fb,{kicker:"Before you start",title:`How to use this ${s}`,lead:o.hook}),(0,i.jsxs)("div",{className:l().cols32,children:[(0,i.jsxs)("div",{children:[(0,i.jsx)(d.UW,{title:"In short",paragraphs:[o.description,t.introNote]}),(0,i.jsx)("h3",{className:l().h3,children:"This is for you if"}),(0,i.jsx)("ul",{className:l().ticks,children:o.icp.map(e=>(0,i.jsxs)("li",{children:[(0,i.jsx)(a.JO,{name:"tick",size:16,color:"#0b6db6"})," ",(0,i.jsx)("span",{children:e})]},e))}),(0,i.jsx)("h3",{className:l().h3,children:"What is inside"}),(0,i.jsx)(d.kE,{items:o.whatsInside})]}),(0,i.jsxs)("div",{children:[(0,i.jsx)("h3",{className:l().h3,style:{marginTop:0},children:"Contents"}),(0,i.jsx)("ul",{className:l().contents,children:c.map(e=>{let[t,o]=e;return(0,i.jsxs)("li",{children:[(0,i.jsx)("span",{children:t}),(0,i.jsx)("span",{children:o})]},`${t}-${o}`)})}),(0,i.jsx)(d.UW,{title:t.introCallout.title,paragraphs:t.introCallout.paragraphs,dark:!0,style:{marginTop:"5mm"}})]})]})]}),1),t.pages.map((e,t)=>w(e.label,e.body,t+2,{land:e.land})),w("Next step",(0,i.jsxs)(i.Fragment,{children:[(0,i.jsx)(d.Fb,{kicker:t.closeHead.kicker,title:t.closeHead.title,lead:t.closeHead.lead}),t.closeBody,(0,i.jsxs)("div",{className:l().close,children:[(0,i.jsxs)("div",{children:[(0,i.jsx)("h2",{children:o.ctaHeading}),(0,i.jsx)("p",{children:o.ctaText}),(0,i.jsx)("ul",{className:l().closeList,children:t.closeBullets.map(e=>(0,i.jsxs)("li",{children:[(0,i.jsx)(a.JO,{name:"tick",size:14,color:"#5bb1e6"})," ",(0,i.jsx)("span",{children:e})]},e))}),(0,i.jsx)("a",{className:l().btn,href:`${h}${o.ctaHref}`,children:"Request a call"}),(0,i.jsxs)("a",{className:l().btnUrl,href:`${h}${o.ctaHref}`,children:[u,o.ctaHref]})]}),(0,i.jsxs)("div",{className:l().contact,children:[(0,i.jsx)("strong",{children:"Systech IT Solutions"}),(0,i.jsx)("p",{children:o.address}),(0,i.jsx)("p",{children:(0,i.jsx)("a",{href:"tel:+441482770583",children:"+44 (0)1482 770583"})}),(0,i.jsx)("p",{children:(0,i.jsx)("a",{href:`mailto:${p}`,children:p})}),(0,i.jsx)("p",{children:(0,i.jsxs)("a",{href:`${h}/resources/${t.slug}`,children:[u,"/resources/",t.slug]})}),(0,i.jsxs)("p",{style:{color:"#c7d6e1",fontSize:"8pt",marginTop:"3mm"},children:["ISO 27001 and ISO 9001 certified. 100% UK-based team. This ",s," is printed from the web page above and checked on the date in the footer."]})]})]})]}),m-1)]})}var w=o(65996),y=o(85695),f=!0;let g={unstable_runtimeJS:!1};function b(e){let{slug:t,model:o,hash:s,fields:a,captions:r}=e,d=w.PA[t];return(0,i.jsxs)(i.Fragment,{children:[(0,i.jsxs)(n(),{children:[(0,i.jsx)("title",{children:`${o.title} (premium print) | Systech`}),(0,i.jsx)("meta",{name:"robots",content:"noindex, nofollow"}),(0,i.jsx)("meta",{property:"og:image",content:y.R9}),(0,i.jsx)("meta",{name:"premium-hash",content:s}),(0,i.jsx)("meta",{name:"premium-title",content:o.title}),(0,i.jsx)("meta",{name:"premium-subject",content:d.pdf.subject}),(0,i.jsx)("meta",{name:"premium-keywords",content:d.pdf.keywords}),(0,i.jsx)("meta",{name:"premium-checked",content:d.checked}),(0,i.jsx)("meta",{name:"premium-fields",content:JSON.stringify(a)}),(0,i.jsx)("meta",{name:"premium-captions",content:JSON.stringify(r)})]}),(0,i.jsx)(m,{r:d,m:o})]})}},27142:function(e){e.exports={cover:"cover_cover__6eSmu",grid:"c

1over_grid__Lg4_V",vignette:"cover_vignette__ao144",top:"cover_top__nFfGp",logo:"cover_logo__p0p5d",tag:"cover_tag__BHjKd",titleBlock:"cover_titleBlock__9PCZk",title:"cover_title__4FkmJ",sub:"cover_sub__IRnqq",scene:"cover_scene__HULVW",inside:"cover_inside__8sIuG",insideHead:"cover_insideHead__f12tN",panel:"cover_panel____Mgy",panelN:"cover_panelN__xpefv",panelIcon:"cover_panelIcon__xd6A9",panelTitle:"cover_panelTitle__GNrE4",panelText:"cover_panelText__n5hyf",foot:"cover_foot__n7tGt",iso:"cover_iso__kSfrf",share:"cover_share__hgjME",a4:"cover_a4__M3mFv"}},6490:function(e){e.exports={srOnly:"policy_srOnly__X7qXL",cell:"policy_cell__hzizO",boxWide:"policy_boxWide__AVWgb",meta:"policy_meta__3UvGT",metaField:"policy_metaField__94kRv",clauses:"policy_clauses__wDnDG",clauseTitle:"policy_clauseTitle__xIgzj",clauseText:"policy_clauseText__G9_KO",fill:"policy_fill__fvcAP",fillWide:"policy_fillWide__R42EQ",sign:"policy_sign__HUqfl",note:"policy_note__9F_HT",print:"policy_print__V6YUM",line:"policy_line__3xt1U",fillsPrint:"policy_fillsPrint__xGEYC",toolsPrint:"policy_toolsPrint__BpS76",web:"policy_web__Hvn0w",fillsWeb:"policy_fillsWeb__qdVPK",blank:"policy_blank__hOrS8",toolsWeb:"policy_toolsWeb__6BlN4"}}},function(e){e.O(0,[2446,4084,359,5819,6348,3753,8333,5304,6835,7713,1648,9776,7240,5215,2969,5397,8173,7102,2366,9426,6990,5659,6033,5437,9774,2888,179],function(){return e(e.s=74166)}),_N_E=e.O()}]);

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.