Maximum protection with minimum disruption
ISO 27001 is the industry-standard information security certification, and is key for demonstrating your business’ commitment to keeping both colleagues and clients safe. However, to minimise disruption and maximise chances of achieving certification, you need more than an approach tailored to your industry. You need one tailored to your business.
From finance to tech, our team of ISO 27001 consultants are experts in guiding small and medium-sized businesses through the requirements needed to meet certification standards.
- Certification without disruption
- A clear 6-step ISO 27001 process
- Service tailored to your business
- A team with decades of experience
The certification partner of choice for ambitious SMEs
When you work with Nicolson Bray, you get more than a team of accredited ISO Lead Implementers, Lead Auditors, and CISM and CISSP qualified consultants. You leverage decades of hands-on experience of defining and implementing information security solutions that are pragmatic, affordable and effective.
Confident working in high-risk industries such as finance, healthcare and education, our ISO 27001 consultants deliver solutions which integrate seamlessly with your business. The result is not only ISO 27001 certification, but an ISMS that protects your information and adds tangible business value.
Visibility and control over risks
Reduce the likelihood of attacks and put in place day-to-day controls to tackle information security risks.
Information protection you can trust
Embed an internationally recognised security strategy tailored to your business infrastructure.
Gain a commercial advantage
Build trust with clients, suppliers and regulators by showing you take information security seriously.
Support your financial planning
Accurately budget for information security investment and reduce costs of client due diligence questionnaires.
Our process
Our 6-step process is designed to deliver maximum protection with minimum disruption to your day-to-day operations.
01. Gap analysis & scoping
Our consultants will review what is currently in place, identifying gaps and planning the best scope for ISO 27001 certification.
02. Risk assessment & remediation planning
We will carry out your first risk assessment to identify information security threats and risks to your business. From here, we will plan and implement security protocols to effectively prioritise and manage your cyber business risks.
03. ISMS framework & process development
We will select the correct information security controls in line with your cyber business risks and define and develop processes to run your ISMS.
04. Policy & documentation support
We will navigate the nuances of ISO27001 paperwork and deliver the full documentation set required for certification.
05. Training
Educate your internal staff on the processes and procedures needed to run and manage your ISMS to make sure your information security stays watertight.
06. Internal audit & pre-assessment review
We will conduct a full audit to ensure your ISMS meets your business requirements, including those of internal and external stakeholders. We will also prepare you for stage 1 and 2 of your external audits.
Why Choose Us?
By providing clarity over your risks, guidance through key challenges and partnership in protecting your business, we deliver a cyber security service that makes the invisible visible and keeps you secure.
A dedicated team with decades of experience
Tap into a team of world-class consultants with decades of experience in identifying, remediating and protecting against cyber security threats.
With hands-on knowledge of the latest technology tools and tactics, we deliver quick and effective solutions that help your business to thrive.
Protect your business and your budget
Integrity is our core value. With no commercial commitment to vendors or partners, our implementations are always pragmatic, resilient and built around you.
We manage and maintain a network of expert associates with extensive expertise, allowing us to deliver solutions independent of specific tools, technologies or providers.
A bespoke service as unique as your business
Cookie-cutter, one-size-fits-all cyber security does not work. To get the peace of mind that comes from sure protection, you need a strategy as unique as your business.
As a boutique consultancy powered by a close network of industry experts, we take the time to get to know your business, identify your individual risks, stress-test your existing infrastructure, and deliver a strategy to keep you safe.
Tailored to your industry, built for your business
From supplier and procurement department policies to legal and legislative requirements, access an ISO 27001 service that’s tailored to your industry and built for your business.
Healthcare
Help to secure engagements with NHS Trust procurement departments by giving them reassurance that you’re meeting required levels of security.
Education
Gain trust and secure engagements with public sector suppliers, and avoid costly GDPR penalties by ensuring robust data protection measures are in place.
Finance
Gain a competitive advantage over rival firms, comply with legal requirements and build trust with the FCA and PRA by demonstrating that your cyber security risk is properly managed.
Tech
Assure board members and senior management that your cyber security risk is properly managed, and that your organisation is protected against the reputational impact of a breach.