Cyber Essentials Plus
Get certified fast. Enter corporate procurement with the badge UK buyers expect.
+ What's included− What's included
- Rapid certification
- Annual recertification
- Remediation expertise
Services
Six areas. One specialty.
Cyber security at the core. Not sure where to start? Answer two questions.
01
Cyber Security
Certify, test, respond
Penetration Testing
Independent security testing of your web applications, networks and cloud.
+ What's included− What's included
- Web application testing
- Infrastructure testing
- Cloud security review
Virtual CISO (vCISO)
Senior security leadership on retainer, without the cost of a full-time hire.
+ What's included− What's included
- Strategic security leadership
- Programme delivery
- Senior practitioners only
Security Architecture
Zero Trust, Identity, network segmentation and cloud security design.
+ What's included− What's included
- Zero Trust design
- Identity & Access
Incident Response
On-call retainer, playbook development and tabletop exercises.
+ What's included− What's included
- IR retainer
- Tabletop exercises
Security Awareness
Phishing simulation, e-learning and culture programmes.
+ What's included− What's included
- Phishing simulation
- Tailored content
02
Governance
Oversight and accountability
Gap Analysis & Maturity Assessment
Where you are vs where you need to be, with a prioritised remediation roadmap.
+ What's included− What's included
- Standards-aligned
- Prioritised roadmap
Internal Audit
Pre-certification dry-runs and ongoing internal audit programmes for ISO standards.
+ What's included− What's included
- Lead Auditor expertise
- Findings management
DPO-as-a-Service
Outsourced Data Protection Officer aligned with UK GDPR and DPA 2018.
+ What's included− What's included
- Independent oversight
- DSAR & breach handling
Also relevant: Virtual CISO (vCISO) (Cyber Security)
03
Risk
Registers, suppliers, resilience
Risk Assessment & Risk Register
Build the risk register that auditors and boards expect to see.
+ What's included− What's included
- Information security risk
- Operational risk
Third-Party Risk Management
Vendor risk programme design and operations — driven by GDPR, ISO, NIS2, DORA and SOC 2.
+ What's included− What's included
- Programme design
- Continuous monitoring
DORA Readiness
Digital Operational Resilience Act compliance for financial entities and ICT third-party providers.
+ What's included− What's included
- Five pillars
- TPP register
UK Operational Resilience
Bank of England SS1/21 important business services and resilience scenarios.
+ What's included− What's included
- Important business services
- Self-assessment
ISO 22301 (Business Continuity)
Business Continuity Management System for resilience and DORA alignment.
+ What's included− What's included
- BC/DR planning
TLPT (Threat-Led Penetration Testing)
DORA-mandated threat-led penetration testing for significant financial entities.
+ What's included− What's included
- TIBER-EU aligned
04
Compliance
ISO, SOC 2, GDPR, NIS2
ISO/IEC 27001:2022
Information Security Management System — implementation, certification support, surveillance.
+ What's included− What's included
- Fixed-fee implementation
- Audit body partnerships
ISO/IEC 27701 (Privacy)
Privacy Information Management System extending ISO 27001 with GDPR alignment.
+ What's included− What's included
- GDPR-mapped controls
SOC 2 Type I & II
For UK firms selling to the United States — readiness, evidence and CPA coordination.
+ What's included− What's included
- Type I readiness
- Type II observation
GDPR & UK GDPR
Compliance programmes for organisations handling personal data in the UK and EU.
+ What's included− What's included
- DPIA and ROPA
- International transfers
NIS2 Readiness
Gap assessment and implementation for the NIS2 Directive — applicable to UK firms with EU operations.
+ What's included− What's included
- Gap assessment
- Full implementation
Also relevant: Cyber Essentials Plus (Cyber Security)
05
HR & Recruitment
Contracts, onboarding, payroll
HR Advisory & Documentation
Practical HR support for small and growing teams: contracts, policies and handbooks that keep you compliant.
+ What's included− What's included
- Contracts and policies
- Day-to-day advice
Onboarding & Offboarding
Structured onboarding and offboarding, done properly and on time.
+ What's included− What's included
- Joiner and leaver processes
- Secure by default
Payroll & Benefits Coordination
Coordination of payroll, pensions and benefits with your providers.
+ What's included− What's included
- Payroll coordination
- Pensions and benefits
06
Business Systems
ERP, FileMaker, support
Claris FileMaker ERP
Custom ERP and business applications built on Claris FileMaker: projects, operations, compliance and reporting in one auditable system.
+ What's included− What's included
- Bespoke ERP design
- Server, API and integrations
- Own your platform
ERP Consulting & Migration
Independent, platform-neutral advice on ERP selection and migration, including NetSuite and other systems.
+ What's included− What's included
- Platform-neutral assessment
- Clean data migration
- Private by default
Support & Continuous Improvement
Ongoing support, enhancements and continuous improvement for your business systems.
+ What's included− What's included
- Named support
- Continuous improvement
Not sure which one?
Tell us what is happening and we will point you to the right place.