01 / 03
Security reviews slow deals
Enterprise and public sector buyers often ask for SOC 2, ISO 27001 or Cyber Essentials Plus, plus detailed questionnaires, before they sign or renew.
Prove your security to customers and keep services running
For SaaS and software vendors, managed service providers, and cloud and data centre operators of 50 to 5,000 people. Clear findings for CISOs, security teams, finance and the board, and independent specialists for SOC 2, ISO 27001, Cyber Essentials Plus, NIS and DORA.
Business Cyber Check introduces you to authorised insurers and brokers. We are not an insurer or broker and do not provide quotes or advice. Your enquiry may be shared with up to 3 of them.
What keeps technology leaders up at night
02 / 03
Your access is the target
Attackers go after software suppliers and service providers to reach their customers. Privileged access, build pipelines and support tools need the strongest controls.
03 / 03
Regulation is reaching tech
Cloud providers may already be covered by the NIS Regulations, and the proposed Cyber Security and Resilience Bill would bring managed service providers and data centres into scope.
How we help
01 / 03
Vetted security providers
Specialists who can close gaps, prepare you for assessments and run incident response.
02 / 03
Authorised insurers and brokers
Explore cyber cover with authorised specialists. We don't give quotes or advice ourselves.
03 / 03
Breach lawyers
Legal support on reporting duties, notices and regulators after an incident.
Standards and frameworks we can help you work towards
We don't certify, accredit or assess. We connect you with independent specialists who can help you work towards these.
01 / 06
SOC 2
Help getting controls and evidence ready for a SOC 2 examination by an independent CPA firm.
02 / 06
ISO 27001, 27017 and 27018
Help scoping and preparing an information security management system, with cloud security and cloud privacy controls where customers expect them.
03 / 06
Cyber Essentials Plus
Help getting ready for assessment by a certification body, including for UK public sector contracts that require it.
04 / 06
NIS and the Cyber Security and Resilience Bill
Help checking whether NIS covers your cloud services today, and preparing for the proposed Bill's rules for managed service providers and data centres.
05 / 06
DORA for ICT providers
Help with the security, incident support and contract terms EU financial customers need from ICT providers under DORA.
06 / 06
Software Security Code of Practice
Help aligning with the UK government's voluntary code for software vendors, from secure development to communicating with customers.
How it works
- 01
Book a 20-minute briefing
Tell us about your setup, deadlines and main concerns.
- 02
Get a clear picture
Understand what to prioritise for your security team, board, auditors and insurers.
- 03
Meet the right specialists
We introduce security providers, authorised insurers or brokers, or breach lawyers. You decide whether to go ahead.
Questions
Should we get SOC 2 or ISO 27001?
It depends on what your customers ask for. ISO 27001 is an international standard for an information security management system that can be certified, while SOC 2 is a US attestation framework, with reports issued by independent CPA firms. Some companies hold both. Specialists we introduce can help you decide and prepare.
Can you help a tech company find cyber insurance?
Yes. We can introduce you to up to 3 authorised insurers or brokers who can explain cyber cover options for software, cloud and managed service businesses. We are not an insurer or broker, and we don't quote or give advice. Any quotes, terms or recommendations come from the insurers or brokers, not from us.
Is the briefing free?
Yes. The 20-minute briefing is free and there is no obligation to go ahead with anyone we introduce. We are paid by the specialists, insurers or brokers we introduce, not by you, and we only share your details with those you agree to hear from.
Will the Cyber Security and Resilience Bill apply to managed service providers?
If it becomes law as proposed, yes for medium and large providers. The Bill, still going through Parliament, would bring relevant managed service providers and data centres into the UK's NIS regime, with duties to manage risk and report significant incidents. More detail is expected in secondary legislation and guidance.
Are we already covered by the NIS Regulations?
You may be, if you provide a cloud computing service, online marketplace or online search engine to customers and aren't a small or micro business. These relevant digital service providers must register with the ICO, which regulates them under NIS. Specialists we introduce can help you check your position and prepare for any changes.
Technology
Talk it through in 20 minutes
A free, no-obligation briefing with clear next steps.