{"id":59,"date":"2026-04-27T13:48:23","date_gmt":"2026-04-27T13:48:23","guid":{"rendered":"https:\/\/great-hawking.51-141-39-13.plesk.page\/?page_id=59"},"modified":"2026-05-26T15:25:18","modified_gmt":"2026-05-26T15:25:18","slug":"compliance","status":"publish","type":"page","link":"https:\/\/great-hawking.51-141-39-13.plesk.page\/index.php\/compliance\/","title":{"rendered":"Compliance"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n\n
\n
Compliance & Certification<\/div>\n \n

Got a deadline?
We’ve been<\/em>
here before.<\/span><\/h1>\n\n

A letter from Severn Trent, the NHS, or a large contractor telling you to certify — or lose the contract. It’s more common than you’d think. We’re an IASME-accredited certification body. We’ve taken businesses from nothing to Cyber Essentials certified in 60 days. We know what we’re doing.<\/p>\n \n

\n \n Book a Free Security Review <\/a>\n \n See what we certify ↓ <\/a>\n <\/div>\n \n

IASME accredited certification body · CE+ certified ourselves · ISO27001 in progress<\/p>\n <\/div>\n\n

\n
What's included<\/div>\n
\n
\n
\n \n <\/svg> <\/svg>\n <\/div>\n
\n
Cyber Essentials & CE+<\/div>\n
UK government-backed. Required by NHS, MOD, and Severn Trent supply chains. We’re an accredited certification body.<\/div>\n <\/div>\n <\/div>\n
\n
\n \n <\/svg> <\/svg>\n <\/div>\n
\n
ISO27001<\/div>\n
Information security management system. The international standard for serious information security governance.<\/div>\n <\/div>\n <\/div>\n
\n
\n \n <\/svg> <\/svg>\n <\/div>\n
\n
ISO9001<\/div>\n
Quality management system. Demonstrates consistent, documented business processes and continuous improvement.<\/div>\n <\/div>\n <\/div>\n
\n
\n \n <\/svg> <\/svg>\n <\/div>\n
\n
Cyber Insurance Readiness<\/div>\n
Prepare for insurer questionnaires and demonstrate the controls that reduce your premium and support your claim.<\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n <\/div>\n <\/section>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n\n \n
\n\n
\n
\n <\/svg>\n Supply Chain Compliance — Real Story <\/div>\n \n
“Severn Trent told our client they had 90 days to get Cyber Essentials certified or lose the contract.”<\/em><\/div>\n \n

A West Midlands business in the Severn Trent supply chain received a letter. Certify to Cyber Essentials or the contract is at risk. They had no existing certification, no security programme, and a 90-day deadline. They called ACUTEC.<\/p>

We assessed their environment, identified the gaps, guided them through remediation — firewall configuration, patching, access controls, MFA rollout — and submitted their Cyber Essentials application in week eight. Certified ten days later. Thirty days ahead of the deadline. Contract retained in full.<\/p>

This is not a one-off. Severn Trent, the NHS, the MOD, and most large public sector bodies are tightening supply chain security requirements. If you supply them — this conversation is coming.<\/p>\n \n

\n \n Talk to us about your deadline → <\/a>\n <\/div>\n <\/div>\n\n
\n
\n
What ACUTEC delivered<\/div>\n
\n
\n
1<\/div>\n
\n
Day 1 — The letter arrives<\/div>\n
Client receives Severn Trent supplier requirements. 90-day deadline. No existing certification. Calls ACUTEC.<\/div>\n <\/div>\n <\/div>\n
<\/div>
\n
2<\/div>\n
\n
Week 1 — Gap assessment<\/div>\n
Full security gap analysis against Cyber Essentials requirements. Every gap identified and prioritised.<\/div>\n <\/div>\n <\/div>\n
<\/div>
\n
3<\/div>\n
\n
Weeks 2–7 — Remediation<\/div>\n
Firewall configuration, patching schedules, access controls, MFA rollout. Every gap closed. Evidence gathered.<\/div>\n <\/div>\n <\/div>\n
<\/div>
\n
4<\/div>\n
\n
Week 8 — Application submitted<\/div>\n
Cyber Essentials application submitted with full supporting evidence. Certified within ten days.<\/div>\n <\/div>\n <\/div>\n <\/div>\n
\n
✓<\/div>\n
\n
Certified in 60 days. Contract secured.<\/div>\n
30 days ahead of the Severn Trent deadline · £0 revenue lost<\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n <\/section>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n\n
\n
The standards<\/div>

What each certification actually
means.<\/em><\/h2>\n

Plain English. No framework jargon. What the standard is, who needs it, and what it proves.<\/p> <\/div>\n\n

\n\n
\n
\n
CE — CYBER ESSENTIALS<\/div>\n
The baseline. Required by most supply chains.<\/div>\n
A UK government-backed certification covering five core security controls: firewalls, secure configuration, user access control, malware protection, and patch management. Required by the NHS, MOD, Severn Trent, and most major public sector contractors. We are an IASME-accredited body — meaning we certify other businesses, not just advise them.<\/div>\n <\/div>\n
\n
CE+ — CYBER ESSENTIALS PLUS<\/div>\n
Independently verified. A stronger proof point.<\/div>\n
CE+ adds independent technical verification to the self-assessed Cyber Essentials. A qualified assessor tests your controls rather than taking your word for it. ACUTEC holds CE+ ourselves — we went through the same independently-verified process we put our clients through. We know where it catches people out.<\/div>\n <\/div>\n
\n
ISO27001 — INFORMATION SECURITY<\/div>\n
The international standard. Serious governance.<\/div>\n
ISO27001 is the internationally recognised standard for information security management systems. It requires a documented, audited, and continually improved approach to managing information security risk. It is a significant undertaking — typically 12–18 months — but the result is a security programme that stands up to any scrutiny. ACUTEC is pursuing ISO27001 internally. We are one of very few MSPs in the region doing so.<\/div>\n <\/div>\n
\n
ISO9001 — QUALITY MANAGEMENT<\/div>\n
Documented processes. Consistent delivery.<\/div>\n
ISO9001 is the quality management standard — it proves your business has consistent, documented processes and a commitment to continuous improvement. Often required alongside security certification for public sector and NHS supply chains. Can be pursued simultaneously with ISO27001 to share the audit burden.<\/div>\n <\/div>\n <\/div>\n\n
\n
\n
60<\/div>\n
\n Days to Cyber Essentials<\/strong>\n Our fastest Severn Trent supply chain certification. Against a 90-day deadline. From nothing to certified. <\/div>\n <\/div>\n
\n
IASME<\/div>\n
\n Accredited certification body<\/strong>\n We don’t just help clients get certified — we assess and certify them directly. Stage 1 complete. Stage 2 audit underway. Target: September 2026. <\/div>\n <\/div>\n
\n
CE+<\/div>\n
\n We hold it ourselves<\/strong>\n ACUTEC is Cyber Essentials Plus certified internally. Independently verified. We practise what we sell. <\/div>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n <\/section>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n
\n\n
\n
Compliance pathways<\/div>

Start where you need to.
Build from there.<\/em><\/h2>\n

Most businesses start with Cyber Essentials because of a deadline. The smart ones use it as the foundation for a broader programme.<\/p> <\/div>\n\n

\n
\n
\n Entry point <\/div>\n
Cyber Essentials<\/div>\n
\n From £300 certification fee + our time<\/span>\n <\/div>\n

The foundation. Required by most public sector supply chains. Self-assessed with independent verification of your answers. We guide you through the questionnaire, close the gaps, and submit on your behalf.<\/p>\n