UK SMEs in Brigant computing programmes rarely have a security operations centre. This paper reports a module on backup, identity, supplier questionnaires and ICO-facing incident basics. Students implemented calling-trees more often than ‘zero trust’ posters. Online and campus sections used the same assessed labs with remote datasets. University of Brigant should keep computing regional and realistic. A dual-pathway UK university that only mimics a London unicorn lab will miss the firms that actually employ its graduates.