- Cyber Security
Cyber Essentials Plus Renewal: What You Need to Do Each Year
19 Jun, 2026
Tailored IT consulting solutions for government & public sector — from compliance and security to day-to-day support, all managed by UK-based experts.
Our consultants bring decades of experience across infrastructure, cloud, security and digital transformation.
Every project produces actionable documentation — roadmaps, policies and procedures your team can follow.
We are vendor-neutral, recommending solutions based on what is best for your business, not what earns us the highest commission.
NCSC Cyber Assessment Framework (CAF) compliance workflow supports the OES (Operator of Essential Services) and the public-sector-CNI workload. The CAF 4 objectives (managing security risk, protecting against cyber attack, detecting cyber security events, minimising the impact of cyber security incidents) and the 14 contributing outcomes all need supported workflow. Government Security Classifications (OFFICIAL, OFFICIAL-SENSITIVE, SECRET) workflow supports the data-classification, the marking-and-handling and the disposal workflow. The SECRET workload typically requires a different security regime and SC-cleared (or DV-cleared) personnel, supported through the appropriate workflow. Managing Public Money (MPM, the HM Treasury statement on accounting and reporting in central government), Green Book HM Treasury (appraisal-and-evaluation) and Magenta Book (evaluation) workflow supported. The MPM-compliant accounting, the Green Book-aligned business case and the Magenta Book evaluation workflow all need supported workflow. Public-sector grant-funding, Innovate UK and BBSRC grant workflow supported. The grant-application workflow, the grant-recipient compliance workflow and the post-grant evaluation workflow all need supported workflow.
A clear, structured process from consultation to ongoing support.
We start every engagement by understanding your business goals, challenges and constraints — then design an IT strategy that supports them.
We do not just write reports and walk away. Our consultants roll up their sleeves and help implement the recommendations we make.
Every engagement includes training and documentation so your team builds capability, not dependency on external consultants.
GDS Service Standard 14-points compliance, alpha-beta-live service-assessment cadence and Technology Code of Practice 12-points evidence workflow all retained operationally.
HM Treasury Managing Public Money (MPM), Green Book Five Case Model (Strategic, Economic, Commercial, Financial, Management), Magenta Book evaluation and Section 151 Officer relationship all retained operationally.
ISO 27001 ISMS, ISO 9001 QMS, ISO 14001 EMS and ISO 22301 BCMS integrated-management-system certification with surveillance-audit workflow all retained operationally.
BPSS, SC and DV personnel-security clearance workflow supported.
Modern Slavery Act 2015 and Bribery Act 2010 corporate-offence prevention supported.
Procurement Act 2023 (in force 24 February 2025) and PCR 2015 legacy workflow supported.
Bid-management, SQ and ITT response workflow for public-sector tender supported.
NHS trust, foundation trust and Integrated Care Board (ICB) supplier workflow supported.
SAR (Article 15 UK GDPR) 30-day response and EIR 2004 request workflow supported.
G-Cloud 14 listing submission and Service Definition Document workflow supported.

Yes. UK GDPR, DPA 2018, ICO-registration (the annual Data Protection Fee), the controller-and-processor relationship workflow, the Article 6 lawful-basis workflow, the Article 9 special-category workflow and the data-subject-rights workflow (Article 15-22) all retained operationally.
Yes. HMRC and HMRC Connect-style data-sharing, DWP Digital and Universal Credit-platform, MOJ Ministry of Justice, HMCTS HM Courts and Tribunals Service, HMPPS prisons and Probation Service supplier workflow all retained operationally.
Yes. The NCSC Cyber Assessment Framework (CAF) 4-objectives (managing security risk, protecting against cyber attack, detecting cyber security events, minimising the impact), the 14 contributing outcomes and the NCSC 14 Cloud Security Principles workflow supported as the public-sector cloud-workload assurance baseline.
Yes. The GOV.UK Design System, the GOV.UK Frontend npm-published toolkit, the GDS-aligned UI-pattern workflow, the accessibility-by-default workflow and the Design System component-library workflow all retained operationally.
Limited time offer - valid until 31/05/2026
Book a free consultation and discover how Cloudswitched can help your business make smarter IT decisions.
Submit your details and one of our friendly team members will be in touch shortly
Powered by industry-leading technologies including SolarWinds, Cloudflare, BitDefender, AWS, Microsoft Azure, and Cisco Meraki to deliver secure, scalable, and reliable IT solutions.