Compliance & readiness
Be ready when a client, insurer or auditor asks.
We prepare you for Cyber Essentials, Cyber Essentials Plus and ISO/IEC 27001, then keep you ready. An independent certification body awards the certificate — we get you there.
The ladder
Three levels, climbed in order.
Cyber Essentials
The five core controls, self-assessed and independently verified. Often a condition of contracts and cyber insurance.
Included annually on Managed IT + Security
Cyber Essentials Plus
The same controls, tested hands-on across your devices and systems. Needed for higher-risk contracts.
Preparation from £1,500
ISO 27001 readiness
A proportionate information security management system: risks, policies, evidence and internal audit.
From £9,500
How it works
We prepare. An independent body certifies.
That separation is what makes a certificate worth something to the people asking for it. We run the gap analysis, fix what needs fixing, write what needs writing, and sit alongside you through the audit.
Common questions
Do we need ISO 27001, or is Cyber Essentials enough?
For most organisations, Cyber Essentials — often Plus — is enough. ISO 27001 earns its cost when enterprise clients or tenders require it. We'll tell you which applies before you spend anything.
How long does ISO 27001 take?
Typically three to six months for an organisation of 20 to 100 people, depending on what's already in place. Your team's time matters as much as ours.
What does it cost in total?
Our fee covers preparation. Certification body fees are separate and paid to them directly — we'll give you realistic figures for both before you commit.
Find out where you'd fall short.
The IT & Security Review includes a Cyber Essentials gap analysis, so you know what's exposed before an auditor does.