Cyber Security Without the Jargon
Cyber security is a leadership issue as well as a technical one. We help your board and managers understand the risks that matter most, and put practical protection in place that suits the size of your organisation.
What We Can Do for You
- A security review. Where your information is, who can reach it, and the gaps worth fixing first.
- Clear, short policies that staff can follow.
- Staff awareness, so people know what to look out for and what to do.
- An incident plan, so everyone knows who does what if something goes wrong.
- Supplier checks for the companies that hold or process your data.
- Plain-English reports for your board, senior team or trustees.
Accreditation and Assurance
Contracts, tenders, funders and regulators often ask for evidence that you protect information. We help you prepare for:
- NHS Data Security and Protection Toolkit (DSPT). The annual self-assessment for organisations that access NHS patient data and systems.
- Cyber Assessment Framework (CAF). The NCSC framework for judging how well you manage cyber risk.
- Cyber Essentials. A government-backed scheme covering the basic technical controls that protect against common attacks.
- Cyber Essentials Plus. The same controls, with hands-on technical testing by an approved assessor.
In each case we help you understand what is expected, find the gaps, fix them and gather your evidence. Certificates and assessments are issued by the relevant bodies, and we help you prepare for them.
Working Towards a Wider Standard
If you want a recognised international standard to work towards, we can help you prepare for ISO 27001.
Frequently Asked Questions
How long does a security review take?
For most small and medium-sized organisations, a review takes a few weeks, depending on how many sites and systems you have. We agree the timescale with you before we start.
What does it cost?
The price depends on the size of your organisation and what you need, such as a review, policies, training or accreditation support. We give you a clear quote after a free discovery call. All prices exclude VAT.
What do you need from us?
A named contact, a list of your main systems and suppliers, and any existing policies. For NHS DSPT, CAF or Cyber Essentials, we also need access to the people who can provide your evidence.
Do you issue the certificates?
No. Certificates and assessments are issued by the relevant bodies, such as the NHS, the NCSC and the Cyber Essentials certification bodies. We help you prepare, fix the gaps and gather your evidence.