--- title: ISO 27001 & ISO 42001 Consultancy UK | Cybercontrols description: UK ISO 27001, ISO 42001 and ISO 27701 consultancy led by senior lead auditors. Certified ourselves via SANCERT and on G-Cloud 15. Book a free scoping call. image: https://www.cybercontrols.io/hubfs/cc-newsletter-laptop-banner.jpg --- [Cybercontrols.io](https://www.cybercontrols.io/) [Compliance](https://www.cybercontrols.io/compliance)[Specialist Services](https://www.cybercontrols.io/specialist-services)[Training](https://www.cybercontrols.io/training-courses)[Insights](https://www.cybercontrols.io/blog)[About](https://www.cybercontrols.io/about)[Meet Tony](https://www.cybercontrols.io/tony-the-auditor)[Contact](https://www.cybercontrols.io/contact) Cybercontrols.io Readiness ISO 27001 ISO 42001 ISO 27701 Risk register Internal audit Evidence Certification readiness ISMS and AIMS programme overview Stage 1 audit booked ### Overall readiness 82% on track ### Annex A controls 79 of 93 implemented 11 in progress, 3 not applicable ### Open findings 4 minor, 0 major Internal audit closed out 12 of 16 ### Clauses 4 to 10 4 Context100% 5 Leadership95% 6 Planning88% 7 Support84% 8 Operation76% 9 Evaluation70% 10 Improvement65% ### Road to certification Gap assessment Complete Risk treatment plan Complete Internal audit Complete Management review Next Stage 1 and Stage 2 Planned ### Evidence this quarter Policies approved**24 / 24** Risks treated**38 / 41** Staff trained**96%** Suppliers assessed**18 / 22** ISO Certification · Compliance · Security Consulting # Secure your *data*, secure your *success*. Cybercontrols takes you from first gap analysis to certified and audit-ready across ISO 27001, ISO 42001, ISO 27701 and every framework your customers and regulators ask for, guided by consultants who hold the same certifications themselves. [Book a free scoping call](https://meetings-eu1.hubspot.com/mvan-aswegen)[Explore frameworks](https://www.cybercontrols.io/compliance) **805+**Clients guided worldwide **100%**First-time certification success **15+**Frameworks under one roof **G-Cloud 15**UK Government approved supplier Compliance frameworks ## Every standard your growth depends on, under one roof. Implementation, certification support, internal audit and ongoing operation, implement once, evidence everywhere. ### [ISO/IEC 27001 The global benchmark for information security management, certification first time, without the drama.](https://www.cybercontrols.io/it-compliance/iso-27001-certification) ### [ISO/IEC 42001 The world's first certifiable AI management standard, govern AI before your customers ask you to.](https://www.cybercontrols.io/it-compliance/iso-42001-certification) ### [ISO/IEC 27701 Privacy management built on your ISMS, including the transition to the standalone 2025 edition.](https://www.cybercontrols.io/it-compliance/iso-27701) ### [ISO 9001:2026 Quality management that wins tenders, with transition support for the new 2026 edition.](https://www.cybercontrols.io/it-compliance/iso-9001-certification) ### [NIS2 The EU's cyber directive with teeth, scope, controls and management-body duties handled.](https://www.cybercontrols.io/it-compliance/nis2) ### [DORA Digital operational resilience for financial entities and their critical ICT suppliers.](https://www.cybercontrols.io/it-compliance/dora-resilience) ### [PCI DSS Card-payment security from SAQ to full RoC, scoped so compliance stays affordable.](https://www.cybercontrols.io/it-compliance/pci-dss-compliance) ### [SOC 2 The report your US customers ask for, built on the controls you already run.](https://www.cybercontrols.io/it-compliance/soc-2) ### [All frameworks NIST CSF, DORA, PCI DSS, Cyber Essentials and more, plus our free GRC self-assessment.](https://www.cybercontrols.io/compliance#grc-assessment) Why Cybercontrols ## We sit the same audits our clients do. ### Certified ourselves ISO 27001 and ISO 42001 certified via SANCERT, Cyber Essentials certified, we implement nothing we haven't passed ourselves. ### Practitioners, not templates Your consultant implements and audits management systems every week. You get judgement and war stories, not a binder of boilerplate. ### Built to hand over Every engagement ends with your team running the system, playbooks, training and no consultant dependency by design. Sectors ## Deep experience where compliance bites hardest. From code to cockpit to courtroom, we speak your regulator's language. ![Software development sector compliance](https://www.cybercontrols.io/hubfs/sector-software-development.jpg) ### Software Development ![Fintech sector compliance](https://www.cybercontrols.io/hubfs/sector-fintech.jpg) ### Fintech ![Manufacturing sector compliance](https://www.cybercontrols.io/hubfs/sector-manufacturing.jpg) ### Manufacturing ![Insurance sector compliance](https://www.cybercontrols.io/hubfs/sector-insurance.jpg) ### Insurance ![Medical devices sector compliance](https://www.cybercontrols.io/hubfs/sector-medical-devices.jpg) ### Medical Devices ![Legal sector compliance](https://www.cybercontrols.io/hubfs/sector-legal.jpg) ### Legal ![Defence sector compliance](https://www.cybercontrols.io/hubfs/sector-defence.jpg) ### Defence ![Transport sector compliance](https://www.cybercontrols.io/hubfs/sector-transport.jpg) ### Transport ![Telecommunications sector compliance](https://www.cybercontrols.io/hubfs/sector-telecommunications.jpg) ### Telecommunications ![Satellite sector compliance](https://www.cybercontrols.io/hubfs/sector-satellite.jpg) ### Satellite ![Motor industry sector compliance](https://www.cybercontrols.io/hubfs/sector-motor-industry.jpg) ### Motor Industry ![Government sector compliance](https://www.cybercontrols.io/hubfs/sector-government.jpg) ### Government & Public Sector How it works ## From first call to certificate, in four moves. ### Scope A free call and gap analysis, where you are, what the standard needs, what it will honestly take. ### Build Controls, policies and evidence implemented with your team, lean, proportionate, no template dumping. ### Certify Internal audit, management review and audit-day support until the certificate is on the wall. ### Sustain Surveillance audits, continual improvement and new frameworks added without starting over. Our certifications ## Independently certified. Government approved. The same scrutiny we prepare our clients for, passed ourselves. **ISO/IEC 27001:2022**Information Security Management Certified via SANCERT **ISO/IEC 42001:2023**AI Management System Certified via SANCERT **Cyber Essentials**UK Government-backed cyber security certification **Government Commercial Agency**Approved Supplier via G-Cloud 15 ## Ready when you are. A free 30-minute scoping call with a senior consultant, leave with a clear picture of the path to certification, whether or not you hire us. [Book a free scoping call](https://meetings-eu1.hubspot.com/mvan-aswegen)[Contact us](https://www.cybercontrols.io/contact) Newsletter ## Compliance changes. Know first. One short email a month: framework updates, regulator deadlines and audit-readiness tips from our consultants. No noise, unsubscribe any time. [Cybercontrols.io](https://www.cybercontrols.io/) Secure your data, secure your success. #### Compliance [ISO 27001](https://www.cybercontrols.io/it-compliance/iso-27001-certification)[ISO 42001](https://www.cybercontrols.io/it-compliance/iso-42001-certification)[ISO 27701](https://www.cybercontrols.io/it-compliance/iso-27701)[ISO 9001](https://www.cybercontrols.io/it-compliance/iso-9001-certification)[NIS2](https://www.cybercontrols.io/it-compliance/nis2)[DORA](https://www.cybercontrols.io/it-compliance/dora-resilience)[SOC 2](https://www.cybercontrols.io/it-compliance/soc-2)[PCI DSS](https://www.cybercontrols.io/it-compliance/pci-dss-compliance)[NIST CSF](https://www.cybercontrols.io/it-compliance/nist-csf-programme)[Cyber Essentials](https://www.cybercontrols.io/it-compliance/cyber-essentials)[All frameworks](https://www.cybercontrols.io/compliance) #### Services [ISO 27001 Internal Audit](https://www.cybercontrols.io/it-compliance/iso-27001-internal-audit)[vCISO](https://www.cybercontrols.io/specialist-services/vciso)[Risk Management](https://www.cybercontrols.io/specialist-services/risk-management)[Cyber Strategy](https://www.cybercontrols.io/specialist-services/cyber-strategy)[Business Continuity](https://www.cybercontrols.io/specialist-services/business-continuity)[Security Awareness](https://www.cybercontrols.io/specialist-services/security-training)[Offensive Security](https://www.cybercontrols.io/offensive-security)[Training Courses](https://www.cybercontrols.io/training-courses)[All services](https://www.cybercontrols.io/specialist-services) #### Company [About](https://www.cybercontrols.io/about)[Insights](https://www.cybercontrols.io/blog)[G-Cloud 15](https://www.cybercontrols.io/g-cloud)[Pricing](https://www.cybercontrols.io/pricing)[Contact](https://www.cybercontrols.io/contact)[Privacy Notice](https://www.cybercontrols.io/privacy-notice)[Cookie Policy](https://www.cybercontrols.io/cookies)[Accessibility](https://www.cybercontrols.io/accessibility-statement)[Modern Slavery](https://www.cybercontrols.io/modern-slavery-statement) © 2026 Cyber Controls.io Ltd, trading as Cybercontrols. All rights reserved.Registered in England & Wales, company number 14513536. Registered office: 3 Nursery Gardens, Stannington Station Road, Morpeth, NE61 6FP, United Kingdom. ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercontrols.io/#organization", "@type" : [ "Organization", "ProfessionalService" ], "address" : { "@type" : "PostalAddress", "addressCountry" : "GB", "addressLocality" : "Morpeth", "addressRegion" : "Northumberland", "postalCode" : "NE61 6FP", "streetAddress" : "3 Nursery Gardens, Stannington Station Road" }, "alternateName" : [ "Cybercontrols.io", "Cyber Controls" ], "areaServed" : [ { "@type" : "Country", "name" : "United Kingdom" }, { "@type" : "Place", "name" : "European Union" } ], "contactPoint" : { "@type" : "ContactPoint", "areaServed" : "GB", "availableLanguage" : "English", "contactType" : "sales", "url" : "https://www.cybercontrols.io/contact" }, "description" : "UK information security, privacy and AI governance consultancy that implements and audits ISO 27001, ISO 42001, ISO 27701 and ISO 9001, led by senior lead auditors. Certified to ISO 27001 and ISO 42001 by SANCERT and a G-Cloud 15 supplier.", "founder" : { "@type" : "Person", "jobTitle" : "CEO, Founder and GRC Architect", "name" : "Marius van Aswegen", "sameAs" : [ "https://x.com/MariusTheISOGuy" ] }, "foundingDate" : "2022-11-29", "hasCredential" : [ { "@type" : "EducationalOccupationalCredential", "credentialCategory" : "certification", "name" : "ISO/IEC 27001:2022 certification", "recognizedBy" : { "@type" : "Organization", "name" : "SANCERT" } }, { "@type" : "EducationalOccupationalCredential", "credentialCategory" : "certification", "name" : "ISO/IEC 42001:2023 certification", "recognizedBy" : { "@type" : "Organization", "name" : "SANCERT" } }, { "@type" : "EducationalOccupationalCredential", "credentialCategory" : "certification", "name" : "Cyber Essentials" } ], "identifier" : { "@type" : "PropertyValue", "propertyID" : "Companies House", "value" : "14513536" }, "image" : "https://144611087.fs1.hubspotusercontent-eu1.net/hubfs/144611087/cc-newsletter-laptop-banner.jpg", "knowsAbout" : [ "ISO/IEC 27001:2022", "ISO/IEC 42001:2023", "ISO/IEC 27701:2025", "ISO 9001:2026", "NIS2", "DORA", "SOC 2", "PCI DSS v4", "NIST CSF 2.0", "EU AI Act", "Cyber Essentials", "ISO 27001 internal audit", "Integrated management systems" ], "legalName" : "Cyber Controls.io Ltd", "logo" : { "@type" : "ImageObject", "height" : 178, "url" : "https://144611087.fs1.hubspotusercontent-eu1.net/hubfs/144611087/cybercontrols-logo-white-bg-800.jpg", "width" : 800 }, "memberOf" : { "@type" : "ProgramMembership", "programName" : "UK Government G-Cloud 15 framework", "url" : "https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/550040053926415" }, "name" : "Cybercontrols", "sameAs" : [ "https://www.linkedin.com/company/cybercontrols-io", "https://www.g2.com/products/cybercontrols-io/reviews", "https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/550040053926415", "https://find-and-update.company-information.service.gov.uk/company/14513536" ], "slogan" : "Secure your data, secure your success.", "url" : "https://www.cybercontrols.io/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercontrols.io/#website", "@type" : "WebSite", "inLanguage" : "en-GB", "name" : "Cybercontrols", "publisher" : { "@id" : "https://www.cybercontrols.io/#organization" }, "url" : "https://www.cybercontrols.io/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.cybercontrols.io/#webpage", "@type" : "WebPage", "about" : { "@id" : "https://www.cybercontrols.io/#organization" }, "description" : "UK ISO 27001, ISO 42001 and ISO 27701 consultancy led by senior lead auditors. Certified ourselves via SANCERT and on G-Cloud 15. Book a free scoping call.", "inLanguage" : "en-GB", "isPartOf" : { "@id" : "https://www.cybercontrols.io/#website" }, "name" : "ISO 27001 & ISO 42001 Consultancy UK | Cybercontrols", "url" : "https://www.cybercontrols.io/" } ```