Knowledge bank · article
The certifications, statements and named contacts to have ready before a tender lands: Cyber Essentials Plus, ISO 27001, DSPT and supply chain assurance.
Click any paragraph to highlight it. Highlights and notes are kept on this device.
Useful
One checked place for the certificates and dates the selection questionnaire always asks for.
Valuable
Removes the scramble that causes late submissions and avoidable pass or fail failures.
Impactful
Keeps the firm eligible for higher assurance work, including defence and national security frameworks.
Secure by design delivery
Security architecture, assurance and accreditation built into the delivery method rather than bolted on at the end.
ProofCyber Essentials Plus and ISO 27001 scoped to delivery teams, with an auditable control ledger per engagement.
Assured data handling and classification
Classification aware pipelines, redaction before any model call and a full record of who saw what and when.
ProofRedaction statistics and access records held against every file in the engine and exportable for audit.
Sovereign capability and cleared people
UK based, UK cleared teams with SC and DV coverage and named continuity for long running programmes.
ProofClearance currency and availability tracked in the NN Data Dossier and surfaced in the key people plan.
Supply chain resilience
Subcontractor assurance held to the same evidential standard as our own, with flow down of security obligations.
ProofPartner certification, clearance and performance records versioned in the evidence library.
Continue reading
Return to the library to find related guides, policies and playbooks.