Risk assessment
Working out what matters most to your business, and how you protect it.
IASME Cyber Assurance, Level 1 and 2: IASME Cyber Assurance.
Cyber Essentials covers your technical controls. IASME Cyber Assurance covers the rest: risk, policies, training, backups, incident response and data protection, in one certificate built for smaller businesses.
When customers ask for more.
Cyber Essentials proves your technical basics are right. But bigger customers and supply chains increasingly want to know how you manage risk, look after personal data and respond when something goes wrong.
IASME Cyber Assurance answers those questions in one certificate. IASME describes the audited level as an alternative to ISO 27001 for small companies, with the standard scaled to the size of your business.
What it covers.
Fourteen themes in all, scaled to the size of your business, including:
Policies and procedures
Clear, practical policies your team can actually follow.
Training and awareness
Making sure staff know how to spot and report threats.
Backup and continuity
Backups, business continuity and recovery plans that are kept up to date.
Incident response
Knowing exactly what to do, and who to call, when something goes wrong.
Data protection and suppliers
UK GDPR and the Data Protection Act, plus the risks that come from your suppliers.
Clear pricing.
The standard scales with the size of your business, so we price it after a short conversation about where you are now. You'll get a fixed price before we start.
IASME Cyber Assurance
Most popularOn assessment
+VAT · Level 1 and Level 2
- Level 1: verified self-assessment, re-submitted each year
- Level 2: audit by our assessor, on site or remote
- Guidance on the policies and plans you'll need
Needs a current Cyber Essentials certificate. We can do both together.
Get an IASME quoteWhy IASME with us.
One local team for your Cyber Essentials and Cyber Assurance.
We're a certification body
IASME licenses us, so your Cyber Essentials and Cyber Assurance come from the same team.
Plain-English guidance
We explain what each theme means for a business your size, without the jargon.
Local and on site
Level 2 audits can happen at your premises anywhere in Norfolk, or remotely.
IASME Cyber Assurance, answered.
What's the difference between Level 1 and Level 2?+
Level 1 is a self-assessment, signed off by a board member and checked by an independent assessor. Level 2 adds an audit, where an assessor reviews your documents, talks to key staff and sees how things work in practice.
Do we need Cyber Essentials first?+
Yes. You need a current Cyber Essentials certificate covering your whole organisation, with at least a month left on it. We can certify you for both.
How long does it last?+
Level 1 is renewed every year, alongside Cyber Essentials. Level 2 is valid for three years, as long as Cyber Essentials and Level 1 are renewed each year.
Is it the same as ISO 27001?+
No, but IASME describes the audited level as an alternative to ISO 27001 for small companies. It covers similar ground, scaled to the size of your business.
Is this the old IASME Governance standard?+
Yes. IASME Cyber Assurance is the updated version of IASME Governance, with the same key controls organised into 14 themes.
Often added.
Go beyond the basics.
Tell us a little about your business and where you are with Cyber Essentials, and we'll come back the same working day with a fixed price.
01362 760100Mon–Fri 8:30am–5pm