Secure your systems. Understand your risks. Show the evidence.
An appointed Cyber Essentials and Cyber Essentials Plus certification body, with NCSC assurance under the Cyber Advisor scheme. We help put controls in place and assess them against the relevant standard.
We are appointed to assess and certify other organisations for both schemes. Preparation, remediation and formal assessment have separate records and responsibilities. Certification follows a successful assessment.
Our Cyber Essentials implementation support is assured under the NCSC Cyber Advisor scheme, assessed by IASME. It helps smaller organisations put the five technical controls into practice.
Start with the contract, risk or technical problem you need to address. Implementation support, ongoing monitoring and formal assessment have defined scopes.
Cyber Essentials and Cyber Essentials Plus
The baseline supply chains and contracts ask for. Preparation, remediation and formal assessment are separate pieces of work, whether you take Cyber Essentials or Cyber Essentials Plus, which adds a technical audit where an assessor tests a sample of your devices and accounts.
Help putting the five Cyber Essentials technical controls in place, for small and medium organisations, from an advisor assessed by IASME. We work on your systems alongside your team.
The assurance behind that support: we are an NCSC Assured Service Provider under the Cyber Advisor scheme, assessed by IASME. Supplier due diligence can name the scheme and check the record.
A full information security management system, the proof larger clients and regulators look for. We run ISO 27001 ourselves and are certified by a UKAS-accredited certification body, and support you from gap analysis through an assessment by your chosen certification body.
Protect the inbox and the devices your people work on. We configure and run the protection, usually on licences you already pay for, and keep it that way.
Managed detection and response investigates alerts and supports threat containment. Tooling, monitoring, investigation and response hours are agreed in your service schedule.
For managed clients with agreed incident-response cover, a senior responder coordinates containment, recovery and a record of what happened. The response window, responsibilities and third-party dependencies follow the service schedule.
Support across the 101 controls, from scope and gap analysis to evidence preparation. Discuss the level your contract requires and the work needed to prepare for assessment.
32 seconds · Silent explainer. Preparation and formal assessment have distinct roles.
From readiness to a recorded assessment.
A readiness review identifies gaps against the relevant standard. Remediation puts the required controls in place and records the evidence.
Formal assessment has separate responsibilities and records. Cyber Essentials Plus adds technical testing. Certification depends on the assessment result.
Cyber Essentials or Plus? The same five controls, with different levels of verification.
Cyber Essentials is a verified self-assessment. An assessor checks your answers.
Plus adds technical testing of devices and accounts. Cyber Essentials comes first.
Agree the scope and address any gaps. Preparation and formal assessment are separate steps.
Certification follows a successful assessment. Dead Simple Computing. Talk to our certification team.
How an engagement works
Assess
Review your systems, risks and the standards that apply to the agreed scope.
Prioritise
Record the findings, business impact and work needed to address each gap.
Implement and monitor
Put agreed controls in place. Define monitoring, MDR cover and the human response window in the service schedule.
Assess and record
Prepare the evidence and, where commissioned, arrange the separate formal assessment and record its outcome.
Discuss your next security step.
Tell us about the risks you want to review, the standard being requested and any assessment deadline. We will explain the relevant scope and next steps.
Hello, I am Ainsley, the AI assistant here at Dead Simple Computing. Ask me anything about managed IT, cyber security, software and AI, or governance and audit. I can also put you in touch with a person.
Replies are AI generated and can be wrong. Your messages are sent to a third-party AI service to produce them, and a member of our team can read this chat and may join it. Do not type anything confidential. See our privacy notice.
We use analytics cookies to understand how the site is used so we can improve it. Analytics is on when you visit. You can block or delete cookies in your browser settings, and our cookie notice explains what we set and why.