secure
Secure your systems. Understand your risks. Show the evidence.
An appointed Cyber Essentials and Cyber Essentials Plus certification body, with NCSC assurance under the Cyber Advisor scheme. We help put controls in place and assess them against the relevant standard.
Reading, Berkshire. Supporting organisations across the UK.
Security controls, technical assessment and certification.
Daniel McClure Fisher holds CISSP and MCIIS, is a qualified NCSC Cyber Advisor, and assesses Cyber Essentials and Cyber Essentials Plus. Our team and credentials.
A professional services firm asked us to review where it was exposed. A security assessment found twelve distinct risks, several critical.
We confirmed each finding, explained its business impact and worked through the priorities until every risk was closed.
Read the security assessment case study
We are appointed to assess and certify other organisations for both schemes. Preparation, remediation and formal assessment have separate records and responsibilities. Certification follows a successful assessment.
Our Cyber Essentials implementation support is assured under the NCSC Cyber Advisor scheme, assessed by IASME. It helps smaller organisations put the five technical controls into practice.
What the assurance covers
We are an appointed Defence Cyber Certification body for Levels 0 and 1. We assess both levels, with preparation and formal assessment separately scoped.
Compare DCC Levels 0 and 1Start with the contract, risk or technical problem you need to address. Implementation support, ongoing monitoring and formal assessment have defined scopes.
The baseline supply chains and contracts ask for. Preparation, remediation and formal assessment are separate pieces of work, whether you take Cyber Essentials or Cyber Essentials Plus, which adds a technical audit where an assessor tests a sample of your devices and accounts.
Explore Cyber EssentialsThe Ministry of Defence has asked industry partners to achieve Level 0 by 31 December 2026. Level 0 requires Cyber Essentials for your business-critical systems, and we are an appointed certification body for both.
See what Level 0 involvesHelp putting the five Cyber Essentials technical controls in place, for small and medium organisations, from an advisor assessed by IASME. We work on your systems alongside your team.
See the Cyber Advisor serviceThe assurance behind that support: we are an NCSC Assured Service Provider under the Cyber Advisor scheme, assessed by IASME. Supplier due diligence can name the scheme and check the record.
See our NCSC assuranceA full information security management system, the proof larger clients and regulators look for. We run ISO 27001 ourselves and are certified by a UKAS-accredited certification body, and support you from gap analysis through an assessment by your chosen certification body.
Plan your ISO 27001 pathProtect the inbox and the devices your people work on. We configure and run the protection, usually on licences you already pay for, and keep it that way.
Explore email and endpoint securityManaged detection and response investigates alerts and supports threat containment. Tooling, monitoring, investigation and response hours are agreed in your service schedule.
See how monitoring worksFor managed clients with agreed incident-response cover, a senior responder coordinates containment, recovery and a record of what happened. The response window, responsibilities and third-party dependencies follow the service schedule.
Talk to us about responseWe are an appointed certification body for DCC Levels 0 and 1. Get a scoped quote for the Level 1 evidence review and practical assessment. Preparation and remediation are separate.
Explore DCC Level 132 seconds · Silent explainer. Preparation and formal assessment have distinct roles.
A readiness review identifies gaps against the relevant standard. Remediation puts the required controls in place and records the evidence.
Formal assessment has separate responsibilities and records. Cyber Essentials Plus adds technical testing. Certification depends on the assessment result.
Controls and evidence need to stay current between assessments. Explore Cyber Essentials Plus
Cyber Essentials or Plus? The same five controls, with different levels of verification.
Cyber Essentials is a verified self-assessment. An assessor checks your answers.
Plus adds technical testing of devices and accounts. Cyber Essentials comes first.
Agree the scope and address any gaps. Preparation and formal assessment are separate steps.
Certification follows a successful assessment. Dead Simple Computing. Talk to our certification team.
Review your systems, risks and the standards that apply to the agreed scope.
Record the findings, business impact and work needed to address each gap.
Put agreed controls in place. Define monitoring, MDR cover and the human response window in the service schedule.
Prepare the evidence and, where commissioned, arrange the separate formal assessment and record its outcome.
Tell us about the risks you want to review, the standard being requested and any assessment deadline. We will explain the relevant scope and next steps.
Monday to Friday, 9am to 5.30pm.
Reply within one working day.
