Compliance Readiness
You know exactly what stands between you and the certificate, and the gaps get closed.
- How long4 to 12 weeks
- How we workFixed package
What you receive
You know exactly what stands between you and Cyber Essentials, ISO 27001 or SOC 2, and the gaps get closed without drowning your team in paperwork.
How far are we from passing?
You receiveA gap check against the standard you need
You see the real size of the job before you commit to a date.
What it is. Your current security and processes checked against the standard, gap by gap.
Why it matters. You see the real size of the job before you commit to a date.
Do we need lots of policies?
You receivePolicies written in plain English
Policies people can read are policies people follow.
What it is. The policies the standard asks for, short and in plain English, fitted to how you work.
Why it matters. Policies people can read are policies people follow.
What actually has to change?
You receiveTechnical controls put in place
You become more secure, not just more certified.
What it is. The settings and tools the standard needs: sign-in, devices, backups, logging and access.
Why it matters. You become more secure, not just more certified.
How do we prove it?
You receiveEvidence collected and organised
The assessment goes faster, and so does next year's.
What it is. Screenshots, records and documents gathered in one tidy place for the assessor.
Why it matters. The assessment goes faster, and so does next year's.
What happens during the audit?
You receiveSupport through the assessment
Nobody faces the auditor alone.
What it is. Help preparing for the assessment and answering the assessor's questions.
Why it matters. Nobody faces the auditor alone.
How do we keep the certificate?
You receiveA plan to stay compliant
Renewal is a routine, not a panic.
What it is. A simple calendar of checks and renewals for the year ahead.
Why it matters. Renewal is a routine, not a panic.
From brief to done
- 1
Weeks 1 to 2
Gap check
Where you stand against the standard.
- 2
Following weeks
Close the gaps
Policies, controls and evidence.
- 3
Final weeks
Assessment
Support through the assessment, and a plan for the year.
What can a stranger see about our systems?
Outside-in security look. What anyone on the internet can see about your systems, and the five fixes that matter most.
- You give us written permission and the addresses to check
- We check certificates, email settings and anything exposed, from the outside only
- A short report with the fixes in order
- It is free. There is nothing to pay and nothing to sign.
- The report is yours to keep and share, whatever you decide.
- No sales call unless you ask for one.
Questions people ask
How much does it cost?
We send a written quote after your request: what it covers and what it does not. The tier, scope and timing set the price.
Could I just use AI for this?
AI drafts code and prototypes quickly, and we use it every day. It cannot decide what to build, prove that it is secure, or answer for it when real people rely on it. That is the part you are hiring us for.
Who owns the work?
You do. Code, designs, files and documents are yours, and the quote says so in writing.
Can we change the scope?
Yes. If something needs adding or removing, we agree it in writing before we do it.
What happens after?
Most people go on to Monitoring and Security Watch, but there is no obligation. You keep everything we made.