Cyber, ISO & supplier assurance · IASME licensed certification body
Cyber assurance: Cyber Essentials to ISO 27001
Cyber Essentials in days, ISO 27001 delivered end to end, and supplier risk under control. Delivered by a licensed certification body at fixed published fees, for organisations whose customers, insurers and regulators expect proof.
Every fee on one page
Definition
What is cyber assurance?
Cyber assurance is the evidence that your security controls are real: certification against recognised schemes such as Cyber Essentials and ISO 27001, independent audit of the systems behind them, and checks on the suppliers your business depends on. Good cyber assurance means a customer, insurer, board or regulator can look at your controls and see verified evidence rather than promises.
Intelance delivers the full journey as an IASME licensed certification body: assessment, remediation, certification, ISO 27001 implementation and audit, and supplier assurance, at fixed published fees. Because we certify under the scheme, we know exactly what assessors look for.
Not sure which standard you are being asked for? Our guide Cyber Essentials vs ISO 27001 vs IASME Cyber Assurance explains the difference in plain terms.
Prove the controls
Test and certify what you run rather than what the policy document says.
Certify to the right standard
Cyber Essentials, Plus, IASME Cyber Assurance or ISO 27001, matched to what your buyers demand.
Keep it certified
Renewals, internal audit and a managed ISMS, so the evidence never goes stale.
Check the suppliers
Tiering, question sets and evidence for the third parties your business depends on.
The path
The UK certification ladder
Four recognised steps, each one accepted by a wider set of customers, insurers and regulators than the last. Most organisations climb one rung at a time. We tell you honestly which rung you need.
Cyber Essentials
The UK baseline, required in many public contracts and expected by serious customers. Five technical controls, self assessed and certified.
From £320 + VAT · typically days Step 2 of 4Cyber Essentials Plus
The same controls, independently tested on your real systems by our assessors. What insurers and enterprise customers trust.
From £1,150 + VAT · 1 to 2 weeks Step 3 of 4IASME Cyber Assurance
Governance, policy and people controls beyond the technical baseline, assessed under the IASME scheme. The step between Plus and ISO 27001.
Read the comparison guide Step 4 of 4ISO/IEC 27001
The full information security management system for enterprise deals and regulated supply chains, certified by an accredited body.
Readiness from £8,500 + VAT · 3 to 6 monthsAlready certified? The ladder also runs in maintenance mode: renewals, internal audit and a managed ISMS keep certificates current without the annual scramble.
Our services
Cyber, ISO and supplier assurance services
Every service has a published fee and a defined output. Start with the one that matches what is being asked of you. They stand alone or run in sequence.
Cyber Essentials
The UK baseline certificate, assessed and issued by our IASME licensed assessors, usually within days.Best whenA contract, framework or customer requires the certificate, and the deadline is close. FeeFrom £320 + VAT 02Cyber Essentials Plus
Independently tested certification on your real systems: the version insurers and enterprise customers ask for by name.Best whenSelf assessment is not enough for the buyer, insurer or framework in front of you. FeeFrom £1,150 + VAT 03Cyber Essentials Pre-Assessment
A dry run against the real question set, with hardening before anything goes on record.Best whenYou cannot afford a failure on record and want to know you will pass before you book. Fee£1,500 04Failed Cyber Essentials support
Structured recovery when an assessment has gone wrong: the gaps closed and the resubmission managed.Best whenAn assessment has failed and a bid or renewal deadline is looming. FeeFrom £950 + VAT 05ISO 27001 Gap Assessment
Exactly where you stand against ISO/IEC 27001:2022, with a costed plan to certification, before you commit to a programme.Best whenYou are being asked for ISO 27001 and need an honest distance measure rather than a sales estimate. FeeFrom £8,500 + VAT 06ISO 27001 implementation & Managed ISMS
The management system built to pass certification and run without us, or run for you month by month if you prefer.Best whenAn enterprise deal or regulator requires the full standard, certified. FeeFrom £25,000 + VATManaged ISMS from £2,500 a month 07
ISO 27001 Internal Audit
The internal audit the standard requires, delivered independently by qualified lead auditors before the certification body arrives.Best whenYour audit is due, and doing it yourself would not survive scrutiny. FeeFrom £4,500 + VAT 08OT / IT Cyber Readiness
A joined up view of production systems and corporate IT, with a plan that does not interrupt operations.Best whenOperational technology and IT share risk and nobody owns the combined picture. FeeFrom £16,500 + VAT 09Supplier AI & Cyber Risk Assessment
Your key suppliers assessed for cyber and AI risk, tiered by exposure, with evidence you can put in front of a board or customer.Best whenYour biggest risks now sit with suppliers nobody has checked. FeeFrom £8,500 + VAT 10vSCARO
A virtual security, compliance and assurance office: the function run month by month by named senior people.Best whenYou need the security function owned and evidenced without a permanent hire. FeeFrom £7,500 a monthNot sure where to start?
Which certification or check do you need?
Six situations we are usually called into. If one of them sounds like yours, that is the place to start. If none of them fit, book a call and we will point you at the right first step.
How we work
How we deliver cyber assurance
The same model that runs across every Intelance practice: we assess, we build, and we operate, with independent certification and audit across all three.
Assess
Fixed fee assessments that tell you the honest distance to the certificate or standard being asked of you.
Services in this stageBuild
Controls, management systems and supplier checks built to pass assessment and keep working afterwards.
Services in this stageOperate
Named senior people keep the system live, the evidence current and the renewals on time.
Services in this stageCertification and audit run across all three
Our IASME licensed assessors certify Cyber Essentials and Plus. Qualified lead auditors deliver ISO 27001 internal audit. If we built your system, a different and independent team assures it.
Every engagement starts with a scoping call at no charge and a fixed fee in writing, and ends with evidence you own.
Why Intelance
What you can expect from a licensed body
A licensed certification body
Intelance certifies Cyber Essentials and Cyber Essentials Plus under the IASME scheme, verifiable on the IASME register. You deal with the certification body itself rather than a broker.
Certified ourselves first
Intelance holds Cyber Essentials Plus and IASME Cyber Assurance Level 2 (audited) with Quality Principles. We do not sell a certificate we have not passed, and every claim is linked from the About page.
Fees fixed before work starts
Every service on this page has a published fee, from a £320 certificate to a full ISO 27001 programme. The fee is confirmed in writing before work starts.
Licensed assessors and senior consultants
Engagements are led by a senior partner and delivered by licensed assessors, qualified lead auditors and senior consultants, supported by proven associates where scale is needed.
Independence by structure
If we built your ISMS, a different and independent team audits it. Certification decisions are made against the scheme requirements alone.
The people behind the work
Every engagement is led by a senior partner. Nothing is offshored and nothing is handed to a junior bench.
Case studies
All case studiesCyber security guides
All insights
Cyber EssentialsISO 27001 vs SOC 2 vs Cyber Essentials: which your buyer wants
What buyers mean when they ask for security certification, how the three compare on what matters commercially, and which to buy for which market.
25 July 2026 · 8 min read Read the guide
CybersecuritySupplier cyber risk assessment: how to vet and monitor your suppliers
25 July 2026 · 9 min read
ISO 27001ISO 27001 internal audit: what auditors check
11 July 2026 · 5 min read
ISO 27001How long does ISO 27001 take? Realistic timelines
11 July 2026 · 5 min read
ISO 27001ISO 27001 certification process: gap analysis to certificate
11 July 2026 · 6 min readReady to talk?
Speak to a licensed assessor
Thirty minutes on what is being asked of you. If a bid or renewal deadline is driving this, say so: Cyber Essentials can complete in days, and recovery from a failed assessment starts at £950 + VAT.
FAQs
Questions about certification and assurance
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is a self assessed certification of five technical controls, verified by a licensed assessor. Cyber Essentials Plus covers the same controls but they are independently tested on your real systems, which is why insurers and enterprise customers tend to ask for it by name. With Intelance, Cyber Essentials starts at £320 + VAT and Plus at £1,150 + VAT.
How much does Cyber Essentials cost in the UK?
The certificate itself starts at £320 + VAT and varies with organisation size. Cyber Essentials Plus starts at £1,150 + VAT. Support costs depend on how ready your environment is, which a £1,500 pre-assessment establishes before anything goes on record.
How fast can we get Cyber Essentials for a bid deadline?
Cyber Essentials typically completes in days once the questionnaire is ready, because our assessors certify under the scheme directly. Cyber Essentials Plus usually takes one to two weeks including the independent testing. If a deadline is close, say so on the first call and we will plan backwards from it.
We failed Cyber Essentials. What now?
Failures are recoverable: the gaps are usually specific and fixable. Our structured recovery support starts at £950 + VAT, closes the gaps and manages the resubmission. Because we are a licensed certification body, we know exactly what assessors look for.
How much does ISO 27001 cost in the UK?
With Intelance, end to end ISO 27001 programmes start from £25,000 + VAT and scale with scope and complexity, with certification body fees separate, usually £4,000 to £12,000 across the three year cycle. Standalone services start lower: a gap assessment from £8,500 + VAT and internal audit from £4,500 + VAT.
Should we do Cyber Essentials or ISO 27001 first?
Almost always Cyber Essentials first. It is faster, cheaper, and covers the technical basics that ISO 27001 assumes. ISO 27001 is the right step when enterprise customers, regulators or supply chains demand a certified management system. Our comparison guide explains the full ladder.
What is IASME Cyber Assurance?
IASME Cyber Assurance is a governance level certification under the IASME scheme, covering policy, people and risk management beyond the technical baseline of Cyber Essentials. It is a practical middle step for organisations that need more than Plus but are not ready for ISO 27001.
The people behind the work on an Intelance engagement?
Certification is delivered by Intelance assessors licensed under the IASME scheme, ISO 27001 audit work by qualified lead auditors, and implementation by senior consultants with established associates where scale is needed. Every engagement is led by a senior partner, and nothing is offshored.