- Azure Cloud
How to Control Cloud Costs on Microsoft Azure
3 Mar, 2026
Cyber Essentials for Mental Health & Therapy in Derby
Certified cyber security that protects your patients' most sensitive personal information
Mental Health Expertise
We understand the specific cybersecurity challenges and compliance requirements facing mental health businesses in London.
Tailored Security Packages
Bespoke Cyber Essentials certification packages designed specifically for the mental health sector, aligned with your compliance needs.
London Based
Centrally located in the City of London, providing hands-on certification support and on-site remediation for mental health firms.
What we do
A complete Cyber Essentials certification service — from initial gap analysis through to successful certification and ongoing annual recertification.
Cyber Essentials Basic
Self-assessment certification covering the 5 core security controls. Suitable for most businesses and a requirement for many government contracts. We guide you through every question and ensure you pass first time.
Cyber Essentials Plus
Advanced certification with hands-on technical auditing, vulnerability scanning and penetration testing by certified assessors. The highest level of Cyber Essentials assurance for your organisation and supply chain.
Gap Analysis
A thorough pre-assessment review of your current security posture against all five Cyber Essentials controls. We identify exactly what needs fixing before you apply — eliminating surprises and failed attempts.
Remediation Support
Hands-on technical work to fix firewalls, patching gaps, access controls and insecure configurations. We don't just tell you what's wrong — we fix it, ensuring every control meets the certification standard.
Staff Training
Cybersecurity awareness training for your employees covering phishing, password hygiene, social engineering and safe working practices. Reducing human-error risks is essential for both certification and real-world security.
Annual Recertification
Cyber Essentials certification must be renewed every 12 months. We manage the entire recertification process, adapting to evolving requirements and ensuring continuous compliance year after year.
Mental health records are among the most sensitive data any organisation holds. A data breach could cause profound harm to vulnerable patients and destroy the trust your practice depends on. Cyber Essentials certification provides verified protection against the most common threats.
Cloudswitched guides therapy practices through Cyber Essentials certification with a focus on patient data protection. We understand the unique technology landscape of mental health services and ensure certification strengthens your security without disrupting clinical workflows.
Mental Health in Derby
Running a Mental Health business in Derby places you within a thriving city. Derby is a key centre for advanced manufacturing, home to Rolls-Royce, Toyota, and Bombardier. The city has significant strengths in aerospace, rail engineering, and automotive manufacturing. With a business community spanning aerospace, manufacturing, engineering, technology, professional services, rail industry, automotive, Mental Health firms benefit from a diverse professional ecosystem and reliable demand for their services.
Why Mental Health Businesses Choose Derby
Mental Health businesses choose Derby for its combination of commercial opportunity and accessibility. Getting to and from Derby is straightforward: Approximately 1 hour 30 minutes by train from London St Pancras, good access to the M1 and A52. The city's reputation and amenities make it an attractive base for Mental Health & Therapy firms.
Local Economy
The local economy of Derby encompasses aerospace, manufacturing, engineering, technology, professional services, rail industry, automotive, creating a diversified commercial environment. Mental Health & Therapy businesses contribute to this economic mix and benefit from the professional services infrastructure that supports the wider business community.
Our Cyber Essentials service for Mental Health
Patient Trust Protection
Certification demonstrates to patients that their deeply personal therapeutic information is protected by government-recognised security standards.
Commissioner Confidence
Meet the cyber security requirements of NHS commissioners and local authority contracts, opening doors to funded mental health service provision.
Professional Body Compliance
Support your compliance with BACP, UKCP, and BPS data protection guidance through independently verified security controls.
Breach Prevention
Implementation of five essential security controls that prevent the vast majority of cyber attacks targeting healthcare organisations.
Mental Health businesses turn to us when
Their video therapy platform is unreliable, disrupting sessions with vulnerable clients at critical moments
Client records aren't encrypted and a breach of mental health data would be catastrophic
Their booking system sends reminders that reveal the nature of the appointment, compromising client privacy
They can't meet NHS IAPT reporting requirements with their current clinical record system
Staff have access to all client records rather than only the clients they're treating
A therapist left the practice and still had access to client records for weeks afterwards
They want to offer online therapy but need a platform that meets clinical and data protection standards
Their practice management system doesn't integrate with insurance billing, causing payment delays
Shared office spaces mean therapy notes are visible on screens that others can see
Our approach
A proven four-stage process that takes you from initial assessment to certified status — with zero failed attempts.
1
Gap Analysis
We audit your current IT environment against all five Cyber Essentials controls — firewalls, secure configuration, access control, malware protection and patch management — identifying every gap that needs addressing.
2
Remediation
Our engineers fix every issue identified in the gap analysis. From firewall rules and patching schedules to user access policies and endpoint protection — we bring your entire environment up to certification standard.
3
Pre-Assessment
Before you submit, we run a full internal pre-assessment to verify every control passes. For Cyber Essentials Plus, this includes vulnerability scanning and testing to mirror the actual audit process.
4
Certification
We guide you through the IASME assessment submission, handle assessor queries, and support you through the entire certification process. Our 100% pass rate speaks for itself.
The 5 core security controls
Cyber Essentials is built around five fundamental technical controls. We ensure your organisation meets every one of them.
Firewalls & Internet Gateways
Your first line of defence. Boundary firewalls and internet gateways must be properly configured to control inbound and outbound traffic, with default passwords changed and unnecessary services disabled.
Secure Configuration
All devices must be configured securely — removing unnecessary software, changing default settings, disabling unused accounts and ensuring only essential services are running on each system.
User Access Control
User accounts must follow the principle of least privilege — only granting the access needed for each role, with admin rights tightly restricted and multi-factor authentication enforced where possible.
Malware Protection
Anti-malware software must be installed on all in-scope devices, kept up to date and configured for real-time scanning. This protects against viruses, ransomware, spyware and other malicious software.
Patch Management
All software and firmware must be kept up to date with security patches applied within 14 days of release. Unsupported software that no longer receives updates must be removed or isolated.
Why choose Cloudswitched for mental health Cyber Essentials?
Sensitive handling of certification processes within mental health practice environments
Understanding of the specific cyber threats facing therapy practices and telehealth services
Experience certifying practices that use a mix of clinical platforms and personal devices
Minimal disruption to patient sessions and therapeutic work during the certification process
Ongoing guidance to maintain certification as your practice technology evolves
Certification Levels
Two levels of certification to match your requirements. Both cover the same 5 core controls — the difference is how they're verified.
Cyber Essentials
Self-assessment certification for most businesses
Basic Level
- Self-assessment questionnaire
- Covers all 5 core controls
- Verified by certification body
- Meets most government contract requirements
- Valid for 12 months
- Includes cyber liability insurance
- No hands-on technical testing
- No vulnerability scanning
Recommended
Cyber Essentials Plus
Hands-on audit for higher assurance
Advanced Level
- Everything in Cyber Essentials Basic
- Hands-on technical audit by assessor
- External vulnerability scanning
- Internal configuration testing
- Phishing simulation testing
- Required for sensitive government contracts
- Higher supply chain assurance
- Includes cyber liability insurance
Why Cloudswitched for Cyber Essentials?
We combine deep technical expertise with a proven certification process to deliver Cyber Essentials with a 100% pass rate.
100% pass rate
Every single business we've guided through Cyber Essentials has achieved certification first time. Our methodical approach and internal pre-assessment process eliminates failed attempts entirely.
IT company, not just consultants
We don't just advise — we implement. As a full-service IT company, we fix the technical gaps ourselves: configuring firewalls, hardening systems, patching software and setting up access controls.
Both Basic and Plus
We deliver both Cyber Essentials Basic and the more rigorous Cyber Essentials Plus certification. For Plus, our engineers prepare your systems for hands-on vulnerability scanning and technical testing.
Full gap analysis first
Before any certification attempt, we run a comprehensive gap analysis against all five controls. You'll know exactly what needs fixing, how long it will take and what it will cost — no surprises.
Fixed-price packages
No hourly rates or unexpected invoices. Our Cyber Essentials packages are fixed-price, covering gap analysis, remediation, certification submission and assessor fees — everything included.
Annual recertification managed
We don't disappear after certification. We manage your annual renewal, adapting to evolving requirements and ensuring continuous compliance — so you never lose your certified status.
Staff training included
Cybersecurity awareness training for your team — covering phishing, passwords, social engineering and safe working practices. Because the biggest vulnerability in any organisation is human error.
Dedicated account manager
A single point of contact who knows your business, your systems and your certification status. No ticket queues, no call centres — just direct access to someone who understands your needs.
Government contract ready
We understand the specific requirements for MOD, NHS and local council contracts. Our certification process ensures you meet every criterion needed to bid on and win government work.
Technology Infrastructure for Mental Health in Derby
Technology is a critical enabler for Mental Health firms in Derby, supporting everything from client communications to data management. The city's digital infrastructure provides the connectivity Mental Health & Therapy organisations need. Professional IT support ensures these businesses can focus on delivering excellent service to their clients.
About Derby
Derby is a major centre for advanced manufacturing and engineering, home to Rolls-Royce's civil aerospace headquarters and a Toyota manufacturing plant. The city's engineering expertise has driven growth in rail technology, with Bombardier (now Alstom) building trains at its Derby facility. The iHub and Infinity Park Enterprise Zone are attracting further high-value manufacturing and technology businesses to complement the city's established industrial strengths.
Key industries: aerospace, advanced manufacturing, rail engineering, technology, professional services, logistics
Getting here: 1 hour 30 minutes by train from London St Pancras
City
Derby
Near Rolls-Royce Heritage Trust, Derby Cathedral
Industry
Cyber Essentials for Mental Health
Cyber Essentials for Mental Health
Achieve Cyber Essentials certification tailored for mental health businesses. We understand the unique cyber threats facing the Mental Health sector and guide you to compliance.
Location
Cyber Essentials IT Security in Derby
Cyber Essentials IT security Derby
Strengthen your IT security in Derby through Cyber Essentials certification. Protect against the most common cyber threats targeting UK businesses.
Frequently Asked Questions
Got questions about Cyber Essentials certification for mental health businesses? We've answered the most common ones below.
Do you understand the sensitivity of mental health data?
Absolutely. Mental health records are among the most sensitive personal data that exists. We implement the highest levels of encryption, access control, and audit logging. We understand that a breach doesn't just violate regulations — it can cause real harm to vulnerable individuals.
Can you provide a secure video therapy platform?
We deploy and manage clinical-grade video consultation platforms with end-to-end encryption, waiting room functionality, session recording controls, and integration with your practice management system. We ensure the platform is reliable, private, and meets professional body standards.
How do you handle access controls for client records?
We implement role-based access controls ensuring therapists only see their own clients' records. We manage joiner/leaver processes to revoke access immediately when staff leave. Screen privacy filters, automatic session locks, and audit logging provide additional layers of protection.
Can you help us meet NHS DSPT requirements?
We guide you through the NHS Data Security and Protection Toolkit assessment, implementing the technical controls and policies required. This includes staff training, access management, encryption, backup, and incident response procedures that satisfy NHS data security standards.
Get Cyber Essentials certified with confidence
Our 100% pass rate means you can trust us to get your mental health business certified first time. We handle the complexity so you don't have to.
Start your certification today
Whether you need Cyber Essentials Basic, Cyber Essentials Plus or help with annual recertification, our team is ready to guide your mental health business through every step of the process.
Submit your details and one of our friendly team members will be in touch with you shortly