Topic: blog posts

Belfast-headquartered managed IT and cyber security provider Leaf IT has announced a key leadership transition as the business prepares for its next phase of growth across the island of Ireland.

Andrew Johnston, Managing Director of Leaf-IT and Steven Goldblatt, Executive Chairman of Leaf-IT

Andrew Johnston has been appointed Managing Director, with founder Steven Goldblatt stepping into the role of Executive Chairman. The transition forms part of a carefully structured growth strategy designed to support continued expansion while ensuring continuity for customers, partners, and employees.

Johnston brings extensive leadership and financial experience to the role. He spent ten years with Deloitte in Belfast and Dublin, advising organisations on growth and investment strategies, before moving into the technology sector as Chief Financial Officer for a high-growth technology partner. During his career, he has supported rapid scaling, overseen acquisitions, and secured both debt and equity funding.

Speaking on his appointment, Andrew Johnston said:

“Leaf IT has more than twenty years of heritage, a highly capable team, and long-standing customer relationships, many of them spanning decades. My role is to scale the business without losing what has made Leaf IT trusted in the first place. That means staying grounded in service excellence, investing in people and partnerships, and helping customers turn technology from an operational burden into a strategic advantage.”

Founder Steven Goldblatt described the appointment as a significant milestone in the company’s journey:

“This transition allows us to accelerate growth while maintaining the values and relationships that Leaf IT has been built on. I will remain closely involved, guiding the growth strategy and supporting our clients to ensure stability and continuity across the business.”

Founded over twenty years ago, Leaf IT has grown from a local IT support provider into one of the leading managed technology and cyber security partners on the island of Ireland. The company delivers managed IT, cloud, productivity, and cyber security services to SMEs, with many customer relationships spanning decades.

Looking ahead, Johnston confirmed that Leaf IT will continue to invest in its people, customer support, and strategic technology partnerships, while also exploring acquisition opportunities that align with the company’s culture and client-first ethos.

“This is an incredibly exciting time to be joining Leaf IT,” Johnston added. “We have recently refreshed our brand, moved to a larger Belfast office, and continued to invest in our team – all of which positions the business strongly for future growth. Technology has never been more central to the competitiveness, resilience, and security of SMEs, and at Leaf IT, we remain firmly focused on business-led technology that enables our customers to grow with confidence.”

Why Traditional VPNs No Longer Cut It – and What You Can Do Instead

The way we work has changed. Remote and hybrid teams are now part of everyday business life, with staff logging in from offices, homes, airports, and everywhere in between. But while the way we work has evolved, the way we secure that work often hasn’t.

41% of UK workers engaged in remote work at least part of the week as of October 2024, with 28% adopting a hybrid model, and 13% working from home full-time. (Office for National Statistics, 2024)

If your business still relies on traditional VPNs or cobbled-together remote access tools, you could be exposing sensitive data and systems to unnecessary risk.

The New Reality of Remote Work

Whether you handle customer records, financial data, or internal IP, remote access is now a gateway that needs to be as secure as it is seamless. But VPNs (once considered the gold standard for remote access) weren’t built for a world of hybrid work, personal devices, and cloud apps.

Here’s where they fall short:

• Too much access: VPNs often provide blanket access to the full network. If one account is compromised, the attacker can move freely across your systems.
• Lack of visibility: It’s tough to track who accessed what, when, and from where—making it harder to detect threats or meet compliance requirements like GDPR.
• User friction: VPNs can be slow, unreliable, and frustrating especially on personal devices or spotty home internet.
• Outdated threat protection: Today’s cyber threats ransomware, phishing, insider attacks—demand smarter, more adaptive defences.

A Smarter Way: Zero Trust Access with SonicWall

To stay protected, many businesses are now switching to SonicWall Cloud Secure Edge – Secure Private Access (CSE SPA). Built for modern work environments, it’s a cloud-native security solution designed to provide access without opening up your whole network.

Here’s how it works:

• Zero Trust approach: Nobody gets access just because they know a password. The system verifies identity, device, location, and intent.
• Granular permissions: Users only get access to the specific apps and data they need.
• Real-time monitoring: Suspicious behaviour? The system reacts immediately, adapting access and alerting IT teams.
• No hardware headaches: It’s built in the cloud, with no servers to manage, so it can scale as your business grows.

Business Benefits That Matter

For business leaders, SonicWall CSE SPA offers a way to protect your operations without slowing people down. For IT managers, it’s a smarter, easier way to manage access and reduce risk.

• Support compliance by tracking access and user behaviour.
• Simplify IT management with centralised control and clear policies.
• Boost productivity with fast, seamless access from any device.
• Contain threats before they spread, even if a breach occurs.

Whether your team is on the road, working from home, or in multiple offices, this is remote access the way it should be: secure, simple, and built for today’s risks.

Ready to Secure Your Remote Workforce?

At Leaf IT, we help businesses in Northern Ireland, Ireland and the UK adopt modern, secure technology that supports growth, not risk. As SonicWall experts, we’ll guide you through setup, access policies, training, and ongoing support, so your team can work confidently and securely, wherever they are.

Let’s talk about securing your business:  hello@leaf-it.com | +44 2890 897650 | leaf-it.com

Microsoft 365 Copilot: AI That Works for Your Business, Securely

AI is transforming the way we work—but not all AI tools are created equal. While platforms like ChatGPT have sparked mainstream excitement, they often raise serious concerns about data security, compliance, and control. For businesses handling sensitive customer data, intellectual property, or regulatory requirements, relying on open AI platforms can carry real risk.

That’s where Microsoft 365 Copilot stands out.

Built into familiar Microsoft apps like Word, Excel, Outlook, and Teams, Copilot is your intelligent, secure AI assistant. Designed specifically for enterprise-grade performance and privacy. Backed by Microsoft’s rigorous security framework and hosted entirely within your Microsoft 365 environment, Copilot ensures that your data never leaves your control.

The Risk of Using Open AI Tools at Work

Many freely available AI tools process queries via public or third-party servers, storing input data that can be used to train future models. That may be acceptable for personal use, but in a business context, this could expose:

· Confidential client information

· Internal strategies or financial data

· GDPR-protected personal data

According to Gartner, by 2026, 30% of large organisations will ban the use of public generative AI tools due to privacy and security concerns. For regulated industries, from finance to healthcare, the risk is too great to ignore.

Why Microsoft 365 Copilot is Different

Copilot is Microsoft’s AI-powered assistant, built directly into the Microsoft 365 apps your business already uses, like Word, Excel, Outlook, PowerPoint, and Teams. It combines the power of large language models with your business data to help you create, summarise, analyse, and automate work in seconds.

With Microsoft 365 Copilot:

· Your data stays within your Microsoft 365 tenant.

· It complies with Microsoft’s enterprise-grade security, identity, and compliance controls.

· You get full transparency and control over how AI is used in your business.

Copilot can:

· Draft documents, emails, and reports in seconds

· Generate insights and forecasts from complex Excel data

· Create high-quality presentations with a few prompts

· Summarise Teams meetings and assign follow-up tasks automatically

· And so much more.

It’s already driving results. A Microsoft study showed that users of Copilot were 29% faster at tasks like writing and summarising, and 70% said they were more productive overall.

Transform Your Workplace with Confidence

At Leaf IT, we help businesses adopt technology that works for them, not against them. As an accredited Microsoft Solutions Partner for Modern Work, we guide you through Copilot setup, governance, and training, ensuring you unlock maximum value while staying secure and compliant.

Let’s talk about how Copilot can transform the way you work—safely, securely, and smartly.

Contact us: hello@leaf-it.ie | +353 (0) 1 582 4075 | leaf-it.ie

At Leaf IT, we’ve always prided ourselves on delivering best-in-class IT solutions, forward-thinking strategy, and cybersecurity excellence to our clients across Ireland and the UK. Now, we’re delighted to announce that our efforts have been recognised at the highest level.

Out of more than 1,000 MSPs across the UK and Ireland that ConnectWise trade with, just 250 meet the standards required to join the ConnectWise Partner Program.

From those, only 11 partners have achieved Pinnacle Partner status – and we’re proud to share that Leaf IT is one of them.

Even more significantly, we’re one of only two Pinnacle Partners in Ireland, marking us as a true leader in the channel when it comes to innovation, service delivery, and strategic growth.

What is a Pinnacle Partner?

The Pinnacle tier is the highest level in the ConnectWise Partner Program – and it’s invite only. Partners who achieve this milestone must demonstrate:

• Consistently high growth rates
• Best-in-class service delivery to end clients
• A forward-thinking mindset and collaborative success in executing mutual action plans

The ConnectWise Partner Program itself is no ordinary recognition. It’s been awarded 5 stars in CRN’s 2025 Partner Program Guide, recognised as an industry-leading initiative that drives innovation, collaboration, and value across the IT channel.

A Legacy of Partnership and Performance

This milestone follows another standout moment for Leaf IT – when we were named ConnectWise Global Cybersecurity Partner of the Year in 2023. It was a major highlight in a year that saw our Cybersecurity practice grow significantly and deliver measurable impact for clients in sectors including manufacturing, professional services, healthcare, and not-for-profit.

We’ve worked hard to align closely with ConnectWise’s vision – and our shared success is a result of that continued commitment.

Driving Cybersecurity Forward – Together

We’re not resting on our laurels. This year, we’re continuing to lead from the front, helping organisations across the island of Ireland prepare for incoming regulations like NIS2 – and we’ll be co-hosting a dedicated NIS2-readiness event with ConnectWise in Dublin this May.

This event will give IT leaders and security professionals the clarity and actionable insight needed to get ahead of compliance, while improving their overall security posture with modern, managed cybersecurity tools.

Find out more and register today by visiting our event page, or get in touch with our team over at Rachel.morrow@leaf-it.com.

Our Commitment to Excellence

Being a Pinnacle Partner is more than just a badge – it’s a reflection of our ongoing drive to deliver value, reduce risk, and give our clients the confidence to grow safely and securely in today’s evolving threat landscape.

To our clients, partners, and team: thank you. This recognition belongs to all of us – and it’s only the beginning.

Want to know how Leaf IT can support your cybersecurity journey or compliance with NIS2?

Get in touch today:

• hello@leaf-it.com
• +44 2890 897650
• Leaf-it.com

In today’s rapidly evolving digital landscape, cybersecurity is a top priority for businesses across the UK and Europe. The NIS2 Directive is a crucial step in strengthening the EU’s cybersecurity framework, with expanded scope, stricter security requirements, and tougher penalties, NIS2 is a regulation that businesses cannot afford to ignore.

More than just a guideline, NIS2 is a legal requirement, and businesses failing to comply could face severe penalties—up to €10 million (£8.6 million) in fines.

What is the NIS2 Directive?

The NIS2 Directive (Directive (EU) 2022/2555) builds upon the original Network and Information Security (NIS) Directive, strengthening cybersecurity measures across the EU. It was introduced to address emerging cyber threats, enhance risk management practices, and improve the resilience of critical infrastructure.

While the UK is no longer an EU member, NIS2 still holds relevance for British businesses, particularly those operating within Europe or handling data and services connected to EU-based clients or suppliers.

Who Does NIS2 Apply to?

NIS2 significantly expands the scope of the original NIS Directive, increasing the number of covered sectors from 7 to 15. By adding 8 new sectors, it ensures broader cybersecurity protections across a wider range of industries and businesses. The 15 sectors impacted by NIS2 are: Energy, Health, Transport, Finance, Water Supply, Digital Infrastructure, Public Administration, Postal Services, Digital Providers, Waste Management, Space, Food, Manufacturing, Chemicals and Research.

NIS2 vs NIS: Key Changes Explained

1. Expanded Scope: NIS2 encompasses additional sectors deemed critical, such as energy, transport, health, and digital infrastructure, thereby increasing the number of organisations required to adhere to its regulations.
2. Enhanced Security Requirements: Organisations must implement comprehensive risk management measures, including incident handling, supply chain security, and encryption, to mitigate cybersecurity threats effectively. ​
3. Stricter Reporting Obligations: Entities are mandated to report significant incidents to relevant authorities within tighter timeframes, ensuring prompt response and mitigation.​
4. Increased Accountability and Fines: NIS2 introduces more stringent supervisory measures and higher penalties for non-compliance, emphasising the importance of adherence to the directive. ​

What Does NIS2 Mean for UK Businesses?

Even though the UK is not bound by EU legislation, British businesses with operations, clients, or supply chains in the EU must align with NIS2 to maintain compliance and avoid penalties. Additionally, the UK government is reviewing its own cybersecurity regulations, which may introduce similar measures in the near future. ​

Preparing for NIS2

1. Assess Your Exposure – Determine whether your organisation falls within the NIS2 scope and identify any areas of potential non-compliance.
2. Strengthen Cybersecurity Measures – Implement risk management policies, supply chain security checks, and employee training programs.
3. Develop a Response Plan – Ensure you have an effective incident reporting system to meet the new rapid notification requirements.
4. Stay Informed – Monitor regulatory updates in both the EU and UK to stay ahead of cybersecurity compliance obligations.

NIS2 Event – Guidance from Industry Experts

To help business leaders navigate these complex legal changes, Leaf IT is hosting a free exclusive Lunch & Learn event at Dublin Chamber on Thursday, 15th May, bringing together industry experts to break down what NIS2 means for your business and how to achieve compliance. To register, complete the online form by clicking here. 

Why Should You Attend the Event?

Not only will you gain an in-depth understanding of the NIS2 Directive, its impact on your business and insight into whether your current cybersecurity setup is compliant. You will walk away with a complete, actionable roadmap to NIS2 compliance tailored for your sector, backed by real-world insights from IT, and regulatory experts at ConnectWise and Nihon Cyber Defence.

Contact Us for NIS2 Compliance Guidance Today

The NIS2 Directive represents a significant step forward in strengthening cybersecurity across Europe. Leaf IT is committed to guiding our clients through this transition, ensuring they remain secure, compliant, and prepared for the future digital landscape.​ To understand what NIS2 means for your business and for ways to stay ahead please reach out to one of our team by clicking here.

Stay informed with the latest in cybersecurity developments by following our blog and reaching out to our team for personalised support.