Rossair
IT support, the phone system and a website that brings in enquiries, all looked after by one team.
Someone is auditing your IT, and your provider doesn't know it
Does any of this sound familiar?
- An investor, client or insurer has sent a security questionnaire and nobody is sure how to answer it.
- Your IT provider closes tickets, but could not tell an auditor who has access to what.
- Your team is already using ChatGPT with client data, and there is no policy for it.
In financial services the question is never just ‘is it fixed?’. It is ‘can we prove it?’. We build IT that answers both.
IT support built for firms with investors, clients and a regulator to satisfy
A financial services firm is judged on its controls. Due diligence reviewers, insurers and the FCA expect multi-factor authentication everywhere, encrypted and protected devices, written security policies, tested backups, a plan for when something goes wrong and a named person accountable for security. We put those in place and keep the evidence, so the next questionnaire is a form to fill in rather than a scramble.
Day to day it is the same team looking after your people: a real person answers the phone, every ticket gets a human reply, and for bigger problems we aim to identify the fix within 30 minutes. Our security work is led by Ian Welch, our Technical Director, a certified ethical hacker and CISSP, and Network London holds Cyber Essentials Plus.
Tell us who has asked you what, and we'll show you how we would answer it.
Tell us what you needWhat financial services firms get from Network London
Evidence, not adjectives
Policies, access reviews, backup tests and device reports you can hand to a reviewer. We helped one investment firm spot that a platform being built for them would store data outside the UK, before they signed.
People who know your firm
Many of our team have been here for years. The engineer who answers knows your partners, your systems and what matters when a deal is closing.
Security led by someone accountable
Ian Welch is named on your policies and in your questionnaires as the person responsible. Reviewers like a name, and so do insurers.
- 20years looking after business IT
- 100+businesses across the world trust us with their IT
- 24/7support, with a real person on the phone
Who we work with
Three of the 100+ businesses we look after, and what we do for them.
LAMDA
Everyday support for 180 people, with access reviews and backup testing built into how they work.
A private equity firm
A small team with serious duties to investors. We shaped their IT and cyber security policy and look after it day to day.
How we start with a regulated firm
A conversation about your firm
Jessica, our Operations Director, replies the same day. We talk about your people, your systems, who audits you and what has been asked of you.
We look at how you work, and at the gaps
Your people, the systems you rely on, who has access to what and where the risks are. Then a clear, written view of what we would put in place and in what order.
Handover, then the paperwork
You meet the people who will look after you and see the handover plan before anything moves. Policies and evidence follow, so the next questionnaire is a form to fill in, not a project.
IT support and security services for financial services firms
Security questionnaires answered
When a client, insurer or investor sends a questionnaire, we work through it with you and put right anything that needs attention first.
Policies written with you
Information security, access, acceptable use, AI use and incident response, written for how your firm works rather than copied from a template.
Access reviews and leavers
Who has access to what, reviewed on a schedule. Leavers lose access on the day, which is the first thing a due diligence reviewer checks.
Multi-factor authentication everywhere
On email, files, remote access and the systems your firm runs on. No exceptions for partners.
Protected and encrypted devices
Every laptop encrypted, kept up to date and protected by endpoint security, wherever your people work.
Backups that are tested
Backups run, and we test that they restore, so recovery is proven rather than assumed.
Cyber Essentials Plus
We hold it ourselves and help you get there. Clients and insurers increasingly ask for it by name.
A named security lead
Ian Welch, our Technical Director, is accountable for security: a certified ethical hacker, CISSP and ISO 27001 lead implementer with more than 25 years' experience.
Tell us what you need
Jessica, our Operations Director, reads every enquiry and replies personally the same day. The first step is a conversation about your business, what's working and where you need help.
Prefer to talk? Call 0333 335 5020. A real person answers, always.
LM04.202, The Leather MarketWeston Street, London SE1 3ER
A short walk from London Bridge and Borough stations
Thank you. Your message has been received and we'll be in touch shortly.
Something went wrong sending that. Please call 0333 335 5020 or email letstalk@networklondon.co.uk.
Has someone sent you a questionnaire?
Send it to us, or tell us who is asking. Jessica, our Operations Director, replies to every enquiry personally, the same day, and the first step is a conversation about your firm.
Tell us what you needDo you provide IT support for financial services firms in London?
Yes. Network London looks after IT and cyber security for financial services firms of 20 to 250 people, including private equity, hedge funds, asset managers, brokers, insurers and FCA-regulated advisers. We're based near London Bridge and support clients across the world. Support is from £1,000 a month.
Can you help us answer an investor's or client's security questionnaire?
Yes, and it is often the reason firms first call us. We go through the questionnaire with you, answer what can be answered today, and put right anything that needs attention first. Then we keep the policies and evidence current so the next one is quicker.
What do due diligence reviewers and insurers expect to see?
Multi-factor authentication everywhere, encrypted and protected devices, written information security policies, tested backups, an incident response plan, regular access reviews and a named person accountable for security. Many also ask for Cyber Essentials, which we hold at the Plus level and help clients achieve.
Do you understand FCA and DORA requirements for IT providers?
FCA-regulated firms are expected to show operational resilience, and firms in scope of DORA must document how they oversee their IT providers, including due diligence, audit rights and an exit plan. We provide that documentation for our part and help you build the rest. We are an IT and security provider, not a compliance consultancy, and we work alongside your compliance adviser.
Do you have a policy for staff using ChatGPT and Copilot?
We write one with you. It covers what client and investor data may and may not be put into AI tools, which tools are approved and how they are set up. We also help firms roll out Microsoft Copilot safely, with training built around adoption.
What happens to our data and Microsoft 365 if we ever leave?
Your Microsoft 365 tenant, your domain and your data are yours. We keep everything documented so a handover is straightforward, which is also what a due diligence reviewer will ask about your exit plan.
Also for firms like yours
Private equity
IT and security for private equity firms with investors to answer to.
Hedge funds and asset managers
IT support for hedge funds, asset managers and investment firms who cannot afford downtime.
Cyber security
We look after your cyber security and help you answer the security questions your clients, insurers and investors send you.
IT compliance
Help with IT compliance, including Cyber Essentials, ISO 27001 and GDPR, from policies to the questionnaires your clients send.
The Cyber Security Vault: 22+ tools and apps
Most of them are free. We'll send you our list of resources you and your team can use to improve your cyber security straight away. No technical knowledge needed.