Your competitive edge lives in CAD geometry, CFD runs, performance maps, and the telemetry from the last race weekend. It usually sits on one server in the corner of the office, and the primes you supply now want proof that it is defended.
We run, secure, build, and prove the technology behind a technical engineering business, so the controls a prime asks about are in place and a year of aero data is backed up off site rather than on one drive. UK-based, near Motorsport Valley, and familiar with the tools your engineers use.
The primes you supply, the teams and the OEMs, are pushing Cyber Essentials down the supply chain, and a tier-2 supplier handling CFD or geometry data is asked to attest before work is awarded. Cyber and D&O insurers want the same controls evidenced, and any investor running diligence asks about the cyber posture.
None of it is abstract: it feeds into whether you stay on an approved supplier list, and what your IP is worth on a balance sheet. We build the posture and the evidence that answers all three.
The specific, recurring problems we are brought in to fix in 20 to 200 person engineering firms.
Years of geometry, CFD output, and performance maps on one box in the corner, with no off-site backup. A drive failure, a flood, or ransomware and it is gone. It is the first thing we secure, and the first thing a Cyber Essentials assessor asks about.
Local or domain admin handed to the workstations "because the engineers complained", a clean Cyber Essentials failure. We remediate it without breaking the SolidWorks, CATIA, or NX workflow the work depends on, so the fix does not cost a day of design time.
UK-based support that understands engineering workstations and the storage behind them, with Managed Detection and Response (MDR) included as standard. We get the CAD and CFD archive off a single NAS and onto backup and recovery that survives a bad day.
We are an appointed Cyber Essentials certification body. We prepare you for Cyber Essentials and for Plus, which adds an independent technical audit and is the baseline your primes and insurers now expect; formal assessment is scoped separately.
When a fifteen year old line-of-business system is holding the business back, we rebuild it on a modern, supported core: custom software, built by the team that also runs and secures it.
We build and maintain the policies, controls, and evidence a prime's supplier questionnaire, a cyber insurer, or an investor's diligence pack asks for, mapped to a recognised framework.
We are based in Reading, a short run from the Northamptonshire, Oxfordshire, and Buckinghamshire corridor, and we know the stack a technical business runs: Microsoft 365 and Defender, SolidWorks, CATIA and NX, ANSYS and Abaqus, a NAS full of projects, and an MRP nobody wants to touch.
Start by reading exactly what they have asked for: base Cyber Essentials and Cyber Essentials Plus are different levels, and supply chain questionnaires often name one specifically. We can confirm which tier your buyer wants.
Because we are an appointed certification body, a short readiness review tells you what needs fixing first, and we prepare you for the assessment itself, which is scoped as its own piece of work. For a tier-2 or tier-3 supplier under prime pressure, it is one of the most useful things you can do.
It is usually the most commercially relevant thing we find. A single NAS holding years of geometry, simulation output, and performance maps, with no off-site backup, is both a Cyber Essentials weakness and a business-ending risk.
A failed drive, a flood, or ransomware and the work of years is gone. We get that archive onto backup and recovery that is tested rather than assumed, which is what an assessor and an insurer want to see.
Yes, and doing it without breaking the workflow is the whole point. Engineers often end up with local or domain admin because a tool complained at some stage, a clean Cyber Essentials failure.
We remediate it carefully, working out what SolidWorks, CATIA, NX, or your simulation tools need, and granting that rather than blanket administrator rights. The result answers the control the standard asks about without costing the team a day of lost design time.
This is work we have done, not a promise. We have taken a business critical system off an unsupported legacy platform and rebuilt it on a modern, supported core, preserving the hard won logic rather than reinventing it.
We do it in stages rather than asking you to switch everything off one weekend, and the same team that builds it runs and secures it afterwards. If your costing, MRP, or job-tracking tool is held together by one person who has left, that is the problem we solve.
Increasingly, a fair amount. Cyber and IT-governance review is a standard part of VC and PE diligence, and an unprepared engineering business can lose ground on valuation over a posture it could have tidied up beforehand.
The questions tend to cover how your IP is protected and backed up, whether you hold recognised certifications such as Cyber Essentials or ISO 27001, and whether the controls are evidenced rather than asserted. We get the posture and the evidence pack in order ahead of the round, so it reads as a strength rather than a deduction.
Send us the supplier questionnaire from your prime, the email from your insurer, or just tell us where the data sits today. We will tell you where you stand and what it takes to close the gap.
Hello, I am Ainsley, the AI assistant here at Dead Simple Computing. Ask me anything about managed IT, cyber security, software and AI, or governance and audit. I can also put you in touch with a person.
Replies are AI generated and can be wrong. Your messages are sent to a third-party AI service to produce them, and a member of our team can read this chat and may join it. Do not type anything confidential. See our privacy notice.
