Cyber Security & Risk Management Solutions.
UK leading cyber security, IA & risk consultancy.
Highly experienced, security cleared delivery.
NCSC Qualified consultancy
NCSC qualified consultancy for Public Sector security initiatives. SC cleared consultants.
Security Architecture
Audit, Design & Compliance consultancy with complex security technical architecture.
Information Assurance
Review & Reports on levels of system security for information being processed.
ISO/IEC 27001:2022 (ISO27001)
Audit, Gap Analysis & qualified consultancy to achieve UKAS ISO27001 Certification.
Cyber Essentials / CE+
Cyber Essentials / Cyber Essentials Plus Certification. Qualified Lead Assessors.
Third Party / Supplier Review
Audit & Compliance Reviews of 3rd Party Supplier Policies, Systems & Services.
Cloud Security
Audit & Design consultancy for transition to secure cloud based architecture.
Risk Assessments
Audit, Compliance & Risk Assessments of Products, Systems & Services
Vulnerability / Threat Analysis
Review, Analysis & Reports on current risks from internal / external threat actors.
QUALIFICATIONS & STANDARDS
Consultant Qualifications.
- NCSC Certified Cyber Professionals (CCP):
- CCP IA Architect;
- CCP SIRA (Security & Information Risk Advisor);
- ISO27001 Lead Auditor;
- Cyber Essentials Plus Assessor;
- CRISC (Certified in Risk & Information Systems Control);
- CCSP (Certified Cloud Security Professional);
- CISSP (Certified Information Systems Security Professional);
- CISA (Certified Information Systems Auditor);
- CISMP (Certificate in Information Security Management Principles);
- CIPP/E - Certified Information Privacy Professional;
- GDPR F - General Data Protection Regulation Foundation;
- Security Clearance to SC & NPPV3 levels.
National Standards / Guidance we work to.
- NCSC Cyber Assessment Framework (CAF);
- GovAssure (Cabinet Office Standard);
- Government Classification Scheme (GSC);
- UK NCSC Cloud Security Principles;
- Cyber Essentials / Cyber Essentials Plus;
- CRISC - Certified in Risk & Informations Systems Control;
- ISO Standards:
- ISO 27001:2022 - Information Security Management System (ISMS);
- BS 10012 - Personal Information Management System (PIMS);
- ISO 28000 - Security Management / Supply Chain;
- ISO 27017:2015 - Code of practice for IS controls based on ISO27002 for cloud services;
- ISO 27018:014 - Code of practice for Personally Identifiable Information (PII) in Public Clouds.