A cyber security event at Bletchley Park has warned that people remain the biggest vulnerability for SMEs, with businesses urged to focus on behaviour, planning and basic protections rather than relying solely on technology.
Hosted by Digital Origin Solutions in partnership with Franklins Solicitors, the event brought together business owners, senior leaders and IT professionals from across Milton Keynes and Northamptonshire to examine how cyber threats are evolving and what smaller organisations can do to respond.
While cyber crime is often viewed as a technical issue, the discussion repeatedly returned to human behaviour. Speakers warned that attackers are increasingly targeting trust rather than systems, using techniques such as impersonation and AI-driven voice cloning to manipulate employees into giving access or information.
Attendees were encouraged to adopt a “politely paranoid” mindset, questioning unexpected requests even when they appear to come from familiar or senior voices within an organisation.
Mobile devices were also highlighted as a growing area of concern. Smartphones and tablets are now a routine part of business operations, yet they often sit outside traditional security controls. The message was clear: mobile security is no longer optional and should be treated as a strategic risk, not a convenience issue.
Business continuity planning emerged as another critical theme. SMEs were urged to consider how they would operate if they suddenly lost access to all data, systems or email. Without preparation, speakers warned, even a short outage can quickly escalate into a serious commercial crisis.
Email security remains one of the most common entry points for cyber attacks. With phishing responsible for the vast majority of incidents, businesses were advised to strengthen detection, verification and archiving processes to reduce risk and support compliance.
Despite the scale of the challenge, the overall message was not one of alarm but of practicality. Strong foundations such as multi-factor authentication, regular patching, secure cloud configurations and clear incident response plans were described as the most effective starting point for SMEs.
Stephen Richardson, CEO at Digital Origin Solutions, said cyber incidents are now a routine risk for smaller businesses. “Every day we see the real impact of cyber attacks on SMEs, from lost revenue to damaged reputations,” he said. “Bringing businesses together to share knowledge helps turn awareness into action.”
Simon Long, managing partner at Franklins Solicitors, said cyber security is as much about culture as technology. “The legal and commercial consequences we see often stem from everyday decisions,” he said. “Improving awareness and resilience across the local business community is essential.”
