About the NCSC and our recognition
To achieve this status, we had to meet a few requirements, including:
- Cyber Essentials and Cyber Essentials Plus
- Sam’s Cyber Advisor certification
- IASME Cyber Assurance Level 1 & 2:
- Level 1: This involves a verified self-assessment where we answered approximately 160 questions about our security practices. It covers key aspects such as incident response, staff training, and operational planning.
- Level 2: This level includes an audit conducted by a trained assessor to verify our governance processes and procedures. It provides a higher level of assurance that our cyber security measures strong and effective. Policies have been created for this and will be rolled out soon.
- IASME Quality Principles:
- These principles ensure that we follow high standards of quality management. This includes comprehensive guidelines for maintaining and improving the quality of our services, ensuring that we consistently meet our clients’ needs and expectations.
Being designated as an NCSC Assured Service Provider is a reflection of our dedication to the rigorous cybersecurity standards set by the NCSC. This recognition certifies that we are fully equipped to deliver services that meet, and often exceed, the NCSC’s high expectations for security and resilience in the face of cyber risks.
Importance of this achievement
Securing the status of NCSC Assured Service Provider is more than just a credential – it demonstrates our strong commitment to cybersecurity and dedication to providing the most reliable service. For our clients, this assurance means:
- Commitment to Excellence: We remain dedicated to continuously improving our cybersecurity measures, staying informed on the latest threats and security trends.
- Trusted Services: Our services have undergone a thorough review and have been certified by a leading authority in cybersecurity.
- Robust Security Protocols: We apply advanced security technologies and protocols to protect against diverse and evolving cyber threats.
- Adherence to Best Practices: Our operations are aligned with the NCSC’s best practices, ensuring we consistently deliver secure and reliable solutions.
The process behind the recognition
Earning the NCSC Assured Service Provider status required us to engage in a long and comprehensive process, showcasing our dedication to maintaining the highest standards of cybersecurity. Our journey included the following steps:
- Initial Self-Assessment: We conducted an internal evaluation to benchmark our existing security systems against NCSC’s criteria.
- Gap Identification: We pinpointed areas where our current practices needed enhancements to meet the NCSC’s stringent requirements.
- Implementation of Improvements: We carefully implemented the necessary improvements to strengthen our security infrastructure, policies, and procedures in line with NCSC guidance.
- Staff Training and Awareness: A key part of the process was ensuring our team was well-versed in the latest cybersecurity strategies through ongoing training and education.
- External Validation: The final stage involved an independent assessment by an NCSC-approved auditor, verifying that we had successfully met all the required standards.
What this means for our clients
Clients can have complete confidence that their projects and data are protected by NCSC-vetted practices and technologies. We are extremely proud of this accomplishment and what it signifies for both our clients and our team.
As we continue to evolve, we remain dedicated to upholding these standards, further enhancing our security capabilities, and delivering services you can 100% trust.
Book a discovery call today to get started.