Your clients trust you with their money. So do the criminals.
fromIT helps financial advisers, mortgage brokers and wealth managers put the right security controls in place, prove them with Cyber Essentials, and keep a calm pair of hands ready if a cyber incident happens.
- Cyber Essentials certified
- ISO 27001 practitioner
- Fixed, published prices
fromIT helps you answer every one of these, with evidence.
Four ways criminals target financial services firms.
Attackers go where the money moves. In advice and broking, that is usually an inbox, a login or a phone call.
Mailbox takeover
A criminal quietly gets into an adviser's email, watches for a withdrawal or completion, then sends new bank details from the real account.
Client impersonation
An email or call that sounds just like a client, asking to move money urgently, change an address or update their bank account.
Fake platform logins
Convincing copies of provider and platform login pages, built to steal the passwords your team uses every day.
Client files exposed
Fact finds, passports, payslips and bank statements. Exactly the documents identity fraudsters want, and the ones the ICO will ask about.
Who asks, what they want, and how fromIT helps.
No regulator hands you a security checklist. They expect reasonable controls and proof you have them. Here is what that looks like in practice.
“That's really useful and makes you realise just how vulnerable not being aware makes us.”
“It's a big tick from me!”
From first step to fully protected.
Most financial services firms follow the same four steps. Start wherever makes sense for your business.
- 01
Start free
Free staff training on the scams that hit advisers and brokers.
Free → - 02
Get certified
Cyber Essentials at a fixed price, the evidence insurers and networks recognise.
From £595 → - 03
Stay secure
Monthly phishing tests, policies with sign-off and dark web monitoring.
From £2 a month → - 04
If it happens
Calm, fast help, usually starting remotely within the hour.
£795 first response →
Financial services questions
Does the FCA require Cyber Essentials?
No. The FCA doesn't name a specific certificate. It expects firms to have effective systems and controls, and to manage the risk of financial crime. Cyber Essentials is the UK government backed way to show you have the basics in place, and insurers and networks recognise it, which is why so many firms use it.
Do we have to tell the FCA about a cyber incident?
The FCA expects to hear about material cyber incidents promptly, under Principle 11. Separately, if personal data is involved and people could be put at risk, the ICO needs to hear within 72 hours of you becoming aware. fromIT helps you work out what happened and what needs reporting, quickly and calmly.
We're an appointed representative. Does this still apply to us?
Yes. Your principal firm is responsible for your regulated activity and will expect you to protect client data. Cyber Essentials, signed policies and staff training records give you clear answers for your next audit.
Can fromIT work with our existing IT provider?
Yes. fromIT focuses purely on security and works alongside whoever looks after your IT today. If you don't have an IT provider, fromIT recommends Adkinsio for everyday IT support.
How much does it cost?
Cyber Essentials starts at £595 as a fixed-price package, plus the IASME assessment fee. Monthly services start from £2 per person. Cyber incident response starts with a fixed £795 first response. Every price is on the site.
Protect your clients' money.
And your firm's name.
Book a 30 minute call. fromIT will look at where your firm stands today and give you a clear, fixed-price plan. No obligation, no sales script.