Cyber Essentials & ISO 27001 Support
We help UK businesses achieve and maintain security certifications. From Cyber Essentials to ISO 27001 readiness, we'll guide you through every step.
Cyber Essentials
Cyber Essentials is a UK Government-backed scheme that helps protect your organisation against the most common cyber attacks. It's now required for many government contracts and increasingly expected by customers and partners.
We guide you through the self-assessment process, helping you understand the five key controls and implement any changes needed to pass certification.
The Five Key Controls
- Firewalls and internet gateways
- Secure configuration
- Access control
- Malware protection
- Patch management
Typical Timeline
Most SMEs achieve Cyber Essentials certification within 2-4 weeks of starting our programme.
Cyber Essentials Plus
Cyber Essentials Plus builds on the standard certification with an independent, hands-on technical verification of your systems. It provides higher assurance and is required for handling certain types of sensitive data.
We prepare your systems for the technical audit, ensuring you're ready to pass the vulnerability scans and system sampling.
What's Included
- Everything in Cyber Essentials
- External vulnerability scan
- Internal system sampling
- Technical verification testing
- On-site or remote audit
Typical Timeline
Cyber Essentials Plus typically takes 4-6 weeks, depending on your current security posture and remediation needs.
ISO 27001 Readiness
ISO 27001 is the international standard for information security management. While we're not a certification body, we help you get ready for formal certification by conducting gap assessments and building your Information Security Management System (ISMS).
Whether you're considering ISO 27001 for competitive advantage, client requirements, or simply to improve your security posture, we'll help you understand what's involved and create a practical implementation roadmap.
Gap Analysis
We assess your current security controls against ISO 27001 requirements and identify what's missing.
Risk Assessment
Comprehensive risk assessment methodology tailored to your business context.
Documentation
ISMS documentation templates and guidance to build your management system.
Readiness Review
Pre-audit review to ensure you're fully prepared for formal certification.
Important Note
We provide ISO 27001 readiness assessments and gap analysis, not formal certification. When you're ready for certification, we'll connect you with accredited certification bodies.
Our Certification Process
A clear, structured approach to getting your business certified.
Discovery
We review your current security controls and understand your business context.
Assessment
Comprehensive gap analysis against certification requirements.
Remediation
We help you implement the changes needed to meet requirements.
Certification
Final review and support through the certification process.