Cyber Security Services in Birmingham

Frequently Asked Questions

• Do you have a Security Operations Centre (SOC) to protect your clients against ransomware and cyber threats?

  Yes. As part of our managed cyber security services, all clients benefit from Managed Detection and Response (MDR) with 24/7 SOC coverage as a baseline. Our SOC continuously monitors endpoints and security telemetry and responds to suspicious or malicious activity, including ransomware attacks.

• Can you help businesses achieve Cyber Essentials and Cyber Essentials Plus?

  Yes. We are a Cyber Essentials and Cyber Essentials Plus certification body, delivering end-to-end cyber security services. This means we help businesses implement the required technical controls and carry out the assessment and certification. Therefore, ensuring your business remains secure from potential threats by cyber criminals, giving your business peace of mind.

• Do you support broader information security standards such as ISO 27001?

  Yes. As part of our compliance-focused cyber security services, we help clients implement the controls, policies and evidence required for ISO 27001. Certification is then completed by an independent third-party auditor to maintain objectivity..

• What is the Cyber Assurance Framework and is it relevant for SMEs?

  The Cyber Assurance Framework from IASME is effectively ISO 27001 tailored for SMEs. It forms part of our structured cyber security services, providing governance, risk management and security controls that can be mapped directly to ISO 27001 if required.

• Can you help businesses manage compliance evidence and risk management in one place?

  Yes. We offer Compliance as a Service within our wider cyber security services, providing a central platform for risk assessments, policies, controls and compliance evidence. This can be mapped across Cyber Essentials Plus, the Cyber Assurance Framework and ISO 27001.

• Do you arrange penetration testing?

  Yes. As part of our advanced cyber security services, we work with specialist third-party penetration testing providers. We deliberately separate responsibilities: we operate the “blue team” (defensive controls), while an independent “red team” carries out testing to give clients an objective view of their security posture.