Recruitment

Thousands of CVs. Hundreds of passports. One inbox from a breach.

fromIT helps recruitment agencies protect candidate data, stop the scams aimed at consultants and contractors, and get the Cyber Essentials certificate that public sector and enterprise clients ask for.

Book a 30 minute call What you'll be asked
  • Cyber Essentials certified
  • ISO 27001 practitioner
  • Fixed, published prices
Questions on your desk this year
“Do you hold Cyber Essentials?”Client
“How do you protect candidate data?”ICO
“Where are ID copies kept, and for how long?”Audit
“Is multi-factor on every account?”Insurer
“Who do we call if it goes wrong?”You

fromIT helps you answer every one of these, with evidence.

Where attacks land

Four ways criminals target recruitment agencies.

Recruitment runs on strangers sending you documents. That is exactly what makes it a good target.

  1. CVs with a sting

    Consultants open attachments from people they have never met, all day long. It is the perfect place to hide malware.

  2. Fake jobs in your name

    Criminals copy your brand and adverts to collect candidates' ID and bank details, and the complaints land with you.

  3. Payroll diversion

    An email that looks like it's from a contractor asks to change their bank details just before payday.

  4. Stolen logins

    Your CRM and job board accounts hold your whole database. One reused password can hand it over.

What's expected of you

Who asks, what they want, and how fromIT helps.

Candidates trust you with their identity, and clients want proof you deserve it. Here is who asks, and what they want to see.

WhoWhat they expectHow fromIT helps
ICOAppropriate security for personal data under UK GDPR, and a report within 72 hours of a breach that puts people at risk.Controls that protect candidate files, and incident response that helps you decide what to report, and when.
Clients and tendersCentral government contracts that involve personal data require Cyber Essentials, and more and more private clients ask for it in supplier checks.Cyber Essentials at a fixed price, so the certificate is ready before the tender is.
Right to work checksCopies of candidates' ID documents must be kept, stored securely and deleted on time.Clear policies on where ID is stored, who can see it and when it goes, signed by your team.
InsurersMulti-factor authentication, backups, patching and staff training, asked on every renewal form.Every control in place and documented, so the form becomes a set of honest yeses.

Every CV is an attachment from a stranger. Your team opens hundreds a week.

A practical plan

From first step to fully protected.

Most agencies follow the same four steps. Start wherever makes sense for yours.

  1. 01

    Start free

    Free staff training on dodgy attachments and fake job scams.

    Free →
  2. 02

    Get certified

    Cyber Essentials at a fixed price, the certificate clients and tenders ask for.

    From £595 →
  3. 03

    Stay secure

    Monthly phishing tests, policies with sign-off and endpoint protection.

    From £2 a month →
  4. 04

    If it happens

    Calm, fast help, usually starting remotely within the hour.

    £795 first response →
fromIT also works with
FAQ

Recruitment questions

Do we need Cyber Essentials to win public sector work?

For central government contracts that involve handling personal data, yes, and it is increasingly asked for in private sector supplier checks too. fromIT gets you certified at a fixed price, from £595.

Someone is advertising fake jobs using our name. What should we do?

Report the adverts to the job board or platform, warn candidates on your website and social channels, and report it to Report Fraud. Check your own accounts haven't been compromised as well. fromIT can help you check and lock things down.

How should consultants handle CVs safely?

Keep CVs in your CRM rather than inboxes and download folders, protect every account with multi-factor authentication, and give consultants regular phishing training. Endpoint protection catches what slips through.

Can fromIT work with our existing IT provider?

Yes. fromIT focuses purely on security and works alongside whoever looks after your IT today. If you don't have an IT provider, fromIT recommends Adkinsio for everyday IT support.

How much does it cost?

Cyber Essentials starts at £595 as a fixed-price package, plus the IASME assessment fee. Monthly services start from £2 per person. Cyber incident response starts with a fixed £795 first response. Every price is on the site.

Protect your candidates.
Win the contracts.

Book a 30 minute call. fromIT will look at where your agency stands today and give you a clear, fixed-price plan. No obligation, no sales script.

Book a 30 minute callashley@fromit.co.uk03333 401 999

Offices in Rugby, Birmingham, Worcestershire and London, and remotely across the UK.

Cyber Essentials certifiedfromIT holds the UK government backed certificate it helps clients achieve.