Do I need Cyber Essentials first?

Yes – a valid Cyber Essentials certificate is a prerequisite for Cyber Assurance. If you do not have one, we sequence both in the same engagement.

Should I choose Level 1 or Level 2?

Level 1 is a verified self-assessment; Level 2 adds an on-site or remote audit. Level 2 is what most buyers and insurers actually want to see.

How long does it take?

Level 1 typically 4–8 weeks; Level 2 usually 8–12 weeks including the audit. We map a realistic timeline on the call.

Is it worth doing before ISO 27001?

Often yes – it closes 60–70% of the ISO 27001 gap at a fraction of the cost, and demonstrates governance maturity to auditors when you scale up later.

Free 30-Minute IASME Cyber Assurance Consultation

What we cover

The 14 themes and what evidence each one really needs
Level 1 vs Level 2 – self-assessment vs on-site audit and when each makes sense
The Cyber Essentials prerequisite and how we sequence both
How Assurance compares to ISO 27001 and when it is a genuine stepping stone
Indicative cost and timeline for your organisation size

Who this is for

UK organisations that need more than Cyber Essentials for a tender, insurer or parent-company requirement, but do not yet want the weight of full ISO 27001. Typically 20–500 staff.

Book a slot

Use the calendar below to grab a 30-minute slot with a UK IASME-licensed assessor.

Open the booking calendar.

Free 30-Minute IASME Cyber Assurance Consultation

What we cover

Who this is for

Book a slot

Book your free 30-minute Cyber Assurance call

Frequently Asked Questions