Oman United Kingdom Norway Support portal
Talk to an expert
AboutContact

Cyber Essentials

Scoping, hands-on remediation and evidence for UK certification, including the fixes rather than just the list of what is wrong.

Prepare for Cyber Essentials
Frameworks
ISO · NIST · NIS2 · GDPR · PDPL
Output
Audit-ready evidence
Reporting
Arabic and English

Why organisations get stuck

Compliance programmes stall when documents are written for auditors rather than for the people who have to follow them. Our Cyber Essentials programme produces a management system your own teams can operate after we leave.

What the programme covers

Each area below is a defined part of the engagement, with an owner, an output and a date.

Scope

A defensible boundary statement agreed before any control work begins.

Technical controls

The five control areas checked, fixed and evidenced.

Gap fixing

Hands-on remediation, not just a list of what is wrong.

Evidence

A maintained evidence set so the next assessment is not a scramble.

Certification support

Submission support and liaison with the certification body.

How the work runs

The same sequence on every engagement, so you know what happens next.

STEP 01

Assess

A gap assessment against the standard, showing what already passes as well as what does not.

STEP 02

Design

Scope, risk method, policy framework and control set agreed with your management team.

STEP 03

Implement

Documents written with the people who will follow them, and controls embedded in existing processes.

STEP 04

Audit

Internal audit and management review run properly, producing the records the certification body expects.

STEP 05

Sustain

Ongoing operation of the management system, or handover to your team with training.

What you get out of it

A system your team can run

Documents and processes written to be operated after we leave.

Audit-ready evidence

Evidence collected as work happens rather than assembled the week before the audit.

Bilingual delivery

Policies, training and reporting available in Arabic and English.

Standards and references: ISO/IEC 27001:2022 · ISO/IEC 27002:2022 · ISO/IEC 42001:2023 · NIST CSF 2.0 · Oman PDPL · Cyber Essentials

Before you enquire

How long does certification readiness take?
It depends on your starting point, which is what the gap assessment establishes. You get an indicative timeline with the assessment, not before it.
Can policies and reports be produced in Arabic?
Yes. Documentation, awareness material and audit evidence are available in Arabic and English, which matters where a regulator will read them.
Do you also perform the certification audit?
No, and no consultancy should. Certification is awarded by an accredited certification body. We prepare you for it and support you through it.

Prepare for Cyber Essentials

One scoping call with the consultant who would run the work. No obligation, no charge.

Prepare for Cyber Essentials
Talk to an expert