Customer Questionnaires
External pressure
Devices & Assets
Do you know every device that connects to your environment?
Why It Matters Now
The pressure on your baseline is rising.
Four external forces are all demanding more evidence from UK businesses
and the intensity keeps climbing
and the intensity keeps climbing
Intensity
Detailed security due diligence forms required before contracts are signed.
Intensity
Public sector and enterprise bids increasingly require certified controls.
Intensity
Renewals demand evidence of MFA, patching, backups and access control.
Intensity
Real-world attacks exploit exactly the same gaps customers ask about.
Every one of these pressures audits the same thing: your cyber security baseline.
Where You Might Stand
The cyber security gaps most UK businesses don't know they have.
It's rarely "we did nothing." It's usually" we did something but not everywhere, not consistently,
and not documented." Ask yourself these six honest questions.
and not documented." Ask yourself these six honest questions.
User Access & MFA
Is multi-factor authentication enforced on every account, everywhere?
Patching & Updates
Are security updates applied within defined timeframes, across all devices?
Secure Configuration
Have default passwords been removed and systems hardened?
Cloud Security
Are Microsoft 365, Google Workspace and Azure properly configured?
Evidence & Documentation
Could you produce evidence today if a customer asked?
Not sure how to answer any of these?
That's exactly what we help with.
How We Help
Our 4-step Cyber Readiness Review.
Practical, structured, and outcome-focused.
No jargon, no theatre just a clear route from "we think we're okay" to "here's the evidence."
No jargon, no theatre just a clear route from "we think we're okay" to "here's the evidence."
step
01
Assess
Review your current controls across users, devices, access, network, cloud and evidence.
01
step
02
Prioritise
Rank gaps by real-world risk, business impact and effort — so you tackle what matters most first.
02
step
03
Remediate
Close the gaps. Work alongside your IT team or have our experts handle remediation directly.
03
step
04
Evidence
Build the evidence pack ready for customers, suppliers, insurers and external assessment.
04
Built for:
IT Directors
Finance Directors
Operations Leaders
Business Owners
SMEs & Mid-Market
Compliance Managers
Your Outcome
From assessment anxiety to assessment confidence
What changes once your readiness review is complete and gaps are closed.
Before
Where most start
Unclear cyber gaps and ownership
No single view of what's exposed — or who's accountable for fixing it.
Scattered, inconsistent evidence
Security proof lives in inboxes, spreadsheets, and people's heads.
Anxiety before external assessment
Audits feel like a test you haven't had a chance to study for.
Reactive remediation under pressure
Fixes only happen after something breaks or an auditor asks.
Slow, painful questionnaire responses
Every security questionnaire restarts the scramble from scratch.
Insurance friction and contract delays
Deals and renewals stall while you scramble to prove you're secure.
after
Where we'll get you
Clear view of cyber readiness
One dashboard showing exactly where you stand and what comes next.
Prioritised remediation roadmap
Know what to fix first, ranked by real risk and business impact.
Confidence before assessment
Walk into any audit or review already knowing the answers.
Proactive, structured improvement
Close gaps on your schedule — not under emergency pressure.
Fast, defensible questionnaire responses
Reuse a trusted evidence library to answer in minutes, not days.
Smoother insurance & contract wins
Sail through reviews and unlock deals faster with proof on hand.
The Business Case
A stronger baseline
reduces risk and enables growth.
reduces risk and enables growth.
Cyber readiness isn't only about defence.
The same controls that close attack paths also help you win contracts faster,
satisfy insurers, and respond to customer due diligence with confidence.
The same controls that close attack paths also help you win contracts faster,
satisfy insurers, and respond to customer due diligence with confidence.
Risk Reduction
What you stop being exposed to
Business Enablement
What you unlock by being ready
Take the First Step
Need to prove your cyber readiness?
Whether you're preparing for assessment, responding to customer assurance requests
or just want to improve your core cyber controls
We can help you identify gaps and move forward with confidence.
or just want to improve your core cyber controls
We can help you identify gaps and move forward with confidence.
FREE 30-MINUTE CALL
Get Cyber Ready for Audits and Insurance
Preparing for a customer security assessment, insurance renewal or certification? We'll find your control gaps and build the evidence pack you need. First 30-minute call is free, no obligation.
0333 370 7000
Mon-Fri 8am-5pm · 24/7 for managed clients
[email protected]
Response within 1 business day, guaranteed
United Kingdom
UK-based team, since 2012
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
FAQ
Cyber Readiness questions
Answers to the questions UK businesses ask us most about Cyber Readiness & Baseline Assurance.
What is a cyber readiness review?
It's a hands-on check of your current cyber controls across users, devices, access, network, cloud and the evidence you hold. We find the gaps, rank the fixes by priority, and get you ready for external audits, customer security checks and insurance questions.
How is this different from a full certification?
A readiness review is about fixing real weaknesses and gathering evidence, not earning a certificate. You get a clear, honest picture of where you stand and what to sort first. When you're ready for formal certification, we take you through that too.
How long does a readiness review take?
Most take two to three weeks. The first call runs about 30 minutes, and the full review depends on how large and complex your systems are.
Will this help us respond to customer security questionnaires?
Yes. You walk away with an evidence pack you can drop straight into customer due-diligence forms, supplier onboarding questionnaires and cyber insurance applications. What used to take days of digging takes minutes.
Do you help with the remediation, or just identify gaps?
Both. You get a prioritised fix-it roadmap, and we either work alongside your existing IT team or take the remediation on ourselves, whichever suits you.
Will this help with cyber insurance?
Yes. Insurers now ask detailed questions about MFA, patching, backups and access control. A readiness review gives you solid, evidenced answers, which often lowers your premium or lifts cover restrictions.
What's the difference between a cyber readiness review and Cyber Essentials?
Cyber Essentials is the formal, government-backed certificate. A readiness review is the step before it: we find the gaps that would fail you, fix the priorities and get your evidence in order. Plenty of UK businesses run one before going for Cyber Essentials, Cyber Essentials Plus or ISO 27001.
How much does a cyber security baseline review cost?
It depends on the size and complexity of your IT setup. The first 30-minute call is free with no obligation, and you get a fixed-price proposal before any work starts. Most UK SMEs earn it back through faster questionnaire responses, lower insurance premiums and contracts that stop stalling on security.
Which industries do you typically work with?
We work with UK SMEs and mid-market firms in professional services, finance, education, healthcare, manufacturing, technology and the public sector supply chain. Anywhere customers and suppliers are tightening their security demands.
