01 July 2026
Small businesses are increasingly targeted by cybercriminals, facing threats like phishing, ransomware, malware, weak passwords, and insider risks, which can lead to severe financial and operational damage.
Small businesses are attractive targets because they often lack dedicated cybersecurity teams, enterprise-grade defences, and robust security policies. Attackers exploit these vulnerabilities to access sensitive data, financial information, or customer records, which can be sold or used for further attacks.
Many small businesses underestimate their risk, assuming hackers focus only on large corporations, but in reality, 46% of all cyber breaches impact businesses with fewer than 1,000 employees.
Cyber Essentials
Cyber Essentials is a UK Government-backed certification scheme that helps keep your organisation’s and your customers’ data safe from cyber attacks. Whatever your size, from micro businesses to large corporations, achieving this certification will guard against the most common cyber attacks. If you have digital assets or store any data, putting the Cyber Essentials controls in place can help you keep it safe: Cyber Essentials - Secure your business
The National Cyber Security Centre (NCSC) recommends Cyber Essentials as the minimum standard of cyber security for all organisations. Cyber Essentials Plus is a technical audit of your IT systems.
We recently caught up with James Lewis from Evosys - who recently helped Visit Pembrokeshire achieve Cyber Smart accreditation.
Who are you and what do you do?
I’m James, and I run Evosys which is an IT Managed Cyber Services and Support company offering Cyber Security Services to SMEs including Government approved Assessments and Certification for Cyber Essentials and Cyber Essentials Plus.
As an accredited CyberSmart partner, our team can assess the vulnerabilities within your business and provide a remediation plan including Cyber Essentials Certification, and with ongoing support and scanning to ensure you remain compliant and maintain a good security posture, our Cyber Essentials Core package has been crafted specifically for Visit Pembrokeshire members in the Hospitality and Tourism sector,
How do you know about Visit Pembrokeshire?
I am from Pembrokeshire and grew up there, I started my first business Evolvement in the county and supported the tourism sector by delivering services such as Web Development, IT Support and Wireless Installation; some of our first customers are from Pembrokeshire and are still with us more than 15 years later. Visit Pembrokeshire have been one of our customers that we have supported for several years, and most recently we helped the organisation achieve the Cyber Essentials Certification standard.
What’s your favourite part of your job?
Working and helping clients, we work for some interesting companies and the people who work within them have such passion, innovation, drive and professionalism, I really respect business owners and the relationships we have with them.
How can you assist the tourism and hospitality community in Pembrokeshire?
Cyber security is a huge and often under-rated threat that can massively impact small businesses. From financial loss, to operational disruption, reputational damage and GDPR fines. We are no longer in the age of individuals running attacks; we are looking at large scale Ai intuitive programmes running 24/7.
As a licenced Cyber Smart accreditor, our team can assess the weaknesses with your tourism and hospitality business to provide SMEs with end-to-end assurance against digital threats.
How best can prospective clients contact you?
Feel free to email me directly with any questions to james.lewis@evosyscyber.com
Or see our VP member offer on our website for more information at https://www.evosyscyber.com/vp
