Home / Cyber Security & Compliance
Security and data protection
Cyber security and compliance for growing businesses
Protect customer information, meet buyer requirements and give your team clear security responsibilities. We help you prepare for Cyber Essentials, put UK GDPR processes into practice and manage the security work as your business grows.
All prices exclude VAT. Final scope and fees are agreed before work begins.
Cyber Essentials, GDPR and security management
Cyber Essentials and Plus readiness
Review your controls, identify gaps and coordinate improvements with your IT team or provider. We prepare the evidence and support your assessment, including preparation for Cyber Essentials Plus.
UK GDPR and data protection
Map the personal data you hold and how it is used. Review privacy notices, retention, access, supplier arrangements and the processes for handling data requests and breaches.
Policies and staff responsibilities
Put practical policies in place for access, devices, remote working and information handling. Give staff clear responsibilities, with joiner and leaver processes that keep access under control.
Supplier and customer assurance
Assess supplier security and data handling. Build a reusable evidence pack for customer questionnaires, procurement checks and contract discussions.
Incident response and business continuity
Define who acts, who decides and who communicates when something goes wrong. Review backup and recovery arrangements and rehearse the response with your team.
ISO 27001 readiness and ongoing governance
Identify gaps against an information security management system, build the risk register and assign owners. Set a review schedule so policies, evidence and actions stay current.
Clear priorities and someone to lead the work
We start with your business, the information you handle and the requirements you need to meet. You receive a prioritised action plan with owners, costs and evidence requirements. We then work with your team and suppliers to close the gaps and track progress.
The engagement can cover a defined requirement or ongoing security and compliance leadership. Certification assessments are carried out by the relevant certification body; we prepare and support the business through that process.
Indicative costs
| Engagement | Indicative cost |
|---|---|
| Security and compliance advisory | £1,100 per day |
| Cyber Essentials readiness | £2,200 |
| Cyber security baseline review | £3,300 |
| GDPR, Cyber Essentials Plus and ISO 27001 readiness | Scoped to your requirements |
Budget guides, with scope and final fee agreed before work begins. Certification, assessment and third-party costs are separate.
Common questions
Can you help us prepare for Cyber Essentials?
Yes. We review your position, organise the work needed and support the assessment process. Certification is awarded by a certification body following its assessment.
Does Cyber Essentials cover GDPR?
No. Cyber Essentials addresses technical security controls. UK GDPR also covers how personal data is collected, used, retained and shared, and how individuals exercise their rights. We scope the security and data protection work together.
Can you work with our existing IT provider?
Yes. We establish responsibilities, agree the changes and track delivery with your existing team and suppliers.
Talk to us
Discuss your security and compliance requirements
Tell us what your customers, contracts or next stage of growth require.