Available for new projects

Security that’s clear,
not complicated.

I’m Alexander Dawes. I help UK organisations get secure, stay compliant and run IT that just works — from ISO 27001 to Microsoft 365.

10+Years in IT
ISO 27001Lead Implementer
M365Global Admin experience
UK GDPR& PECR compliance
ISO27001:2022CECyber EssentialsCE+Cyber Essentials PlusUKGDPR & DPA 2018M365Microsoft 365EntraIdentity & MFAIntuneDevice managementDefenderThreat protectionDMARCEmail securityNCSCGuidanceAIUsage governanceISO27001:2022CECyber EssentialsCE+Cyber Essentials PlusUKGDPR & DPA 2018M365Microsoft 365EntraIdentity & MFAIntuneDevice managementDefenderThreat protectionDMARCEmail securityNCSCGuidanceAIUsage governance

What I can help with.

Six ways to make your organisation safer, simpler and easier to run.

ISO 27001 Implementation

From gap analysis to certification. Scope, risk assessment, Statement of Applicability, policies and audit prep — done properly, not as a tick-box exercise.

Learn more →

Microsoft 365 Security

Lock down your tenant: Conditional Access, MFA, Defender, Intune, Purview and Secure Score improvements, with clear documentation for your team.

Learn more →

UK GDPR & Data Protection

Practical data protection: RoPA, DPIAs, privacy notices, retention schedules, PECR-compliant marketing and handling subject access requests.

Learn more →

Security Reviews

An independent look at where you stand. Prioritised findings, quick wins and a realistic roadmap — written for decision-makers, not just engineers.

Learn more →

Infrastructure & Cloud

Networks, remote access, endpoint management and migrations — SharePoint, Entra ID and hybrid setups that are secure and supportable.

Learn more →

Fractional IT Leadership

Senior IT and security guidance without a full-time hire. Strategy, supplier management, policy and board reporting on a flexible basis.

Learn more →

Not sure where to start?

Answer 8 quick questions and get a tailored recommendation — plus a quick security health score.

Take the 60-second quiz

Is your email domain easy to spoof?

Run a free instant check on your email security and website — no sign-up, results in seconds.

Free security check

Real-world experience. Plain-English advice.

Over a decade across service desk, infrastructure and information security means I know how things actually get done — and what gets in the way.

  • Built and run a certified ISO 27001 ISMS in a live, regulated business
  • Hands-on with Microsoft 365, Entra ID, Intune and Defender every day
  • UK GDPR and PECR handled pragmatically, not with fear
  • Documentation your team can actually use

More about me

Let’s make your IT work for you.

Tell me what you’re trying to achieve. I’ll come back within one working day with honest, practical next steps.

Start a conversation