Capacity for a small internal team
Agree which support queues, devices, cloud services and maintenance tasks DSC owns. Your team keeps control of priorities and approvals, with an escalation route for work needing specialist input.
Space technology / NewSpace
IT and cyber security for space technology
Support the business systems, engineering data and supplier evidence behind your programme.
Additional capacity for your internal team, or managed support for the agreed environment. Based in Reading, with remote support and planned attendance at Harwell and across the UK.
Verified
ISO 27001 & 9001Certified by a UKAS-accredited certification body
Cyber Essentials & PlusCertification body
Cyber Essentials PlusCertified
NCSC AssuredCyber Advisor scheme
CISSPHeld by Daniel McClure Fisher
Contracts and funding
Work from the stated requirement
An ESA contract, UK Space Agency grant, Innovate UK agreement or investor review may ask for different controls and records.
We review the actual wording, scope and timetable with you. If ISO 27001, Cyber Essentials or Cyber Essentials Plus is named, the work is planned against that requirement.
For an investor diligence request, organise the current technical and supplier records first. Outstanding actions need an owner and a plan; they should not be presented as completed controls.
Engineering and business IT
Separate responsibilities around specialist systems
Payload designs and mission data
Map access, storage, retention and recovery for the data in scope. Include partner accounts, external sharing and the points where business systems exchange data with mission systems.
Simulation and image-processing workloads
Review storage, cloud capacity, permissions and costs against the workloads. Availability targets and recovery tests are agreed for the infrastructure DSC supports.
Services
Managed support and assessment preparation
Run
Infrastructure, storage and cloud
Support the agreed business and engineering environment, including storage and cloud services behind simulation or image processing. Monitoring, Managed Detection and Response (MDR), hours and escalation actions are set in the service schedule.
Secure
Access, email and endpoint controls
Review accounts, device protection and access to technical information. Where a contract requires certification, we agree readiness and formal assessment as distinct services.
Build
Software around the programme
Custom software, systems integration and applied AI for business workflows and supporting tools. Data processing, permissions, testing and hosting requirements are agreed during discovery.
Prove
Policies and programme evidence
Prepare the asset, supplier, access and recovery records required for the review. ISO 27001 readiness covers the agreed management-system scope, with formal certification performed by the appointed certification body.
Our appointments and certification An appointed certification body for Cyber Essentials and Cyber Essentials Plus. Assured under the NCSC Cyber Advisor scheme. ISO 27001 certified by a UKAS-accredited certification body.
Access and locations
Harwell, the UK and data handling
Reading is our base for planned attendance at the Harwell cluster, which includes the UK Space Agency, European Space Agency and RAL Space. We agree site access, travel and the work required.
Remote support and planned visits can also be scoped for teams in Glasgow, Bristol, Surrey and elsewhere in the UK. Attendance and response arrangements are part of the agreed service.
Where ITAR, EAR or UK export controls apply, your specialist advisers determine the requirements. We can implement agreed access, logging and hosting arrangements. UK-hosted options are available, with actual data locations, processing and administrative access documented.
Questions
Before you start
Our ESA contract asks for ISO 27001. Where do we start?
Start with the stated requirement, proposed management-system scope, current controls and target date. We can review gaps and agree preparation work. Cyber Essentials Plus does not replace an ISO 27001 requirement, and preparation is distinct from formal certification.
Can you help with UK Space Agency or Innovate UK grant cyber conditions?
We can review the technical controls, reporting and evidence named in the agreement. Where a condition is unclear, confirm it with the funder. The agreed work follows those requirements rather than an assumed standard grant checklist.
Can you support our internal IT team?
Yes. Co-managed support sets out the systems and tasks we own, what your team retains, and how priorities, approvals and escalations work. Specialist mission-system responsibilities remain explicitly assigned.
We are based at Harwell. Where is your team?
Our base is in Reading, Berkshire. We provide remote support and can arrange on-site work at Harwell and elsewhere in the UK. Site access, attendance, supported systems and response arrangements are agreed as part of the service.
Can you support ITAR or export controlled technology?
We review the required access, logging, hosting and administrative arrangements with your export control advisers. Those advisers determine the legal requirements. We agree whether the technical scope can be met before work begins.
Next step
Discuss the systems behind your programme
Tell us the systems you need supported, the contract or grant requirement and your target date. We can agree a starting review and the work to price.
0118 359 2220 · Reading, Berkshire