The ICO has refreshed its guidance, with links to NCSC and Cyber Essentials, and it is a useful checklist for you to benchmark your own security measures.
Why not take a moment to have a look at https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2025/09/information-commissioner-s-office-shares-cyber-security-tips-for-small-businesses/?