Our Process
When a client, tender, or new market asks for a certification, it can feel overwhelming. Aursec helps you move from “What do we need to do?” to “We’re certified” with a clear, five-step process.
Whether you’re aiming for Cyber Essentials, ISO 27001, SOC 2, or another framework, we focus on practical actions that fit your business, not box-ticking for the sake of it.
1. Assess
Understand your requirements
Every engagement starts with clarity. We review your client, tender, or regulatory requirements and translate them into plain English.
We’ll help you answer questions like:
- What exactly is being asked of us?
- Which certification or framework is most appropriate?
- What’s realistic within your timelines and budget?
The outcome is a clear, agreed scope so we’re all working towards the same goal.
2. Align
Map your existing controls to frameworks and regulations
Next, we look at what you already have in place. Policies, processes, systems, and tools are mapped against the relevant framework (e.g. Cyber Essentials, ISO 27001, SOC 2, NIST).
We identify:
- Controls you already meet
- Gaps that need addressing
- Quick wins that reduce risk and build confidence early
You get a practical gap analysis and a prioritised action plan.
3. Implement
Deploy practical controls and documentation
We then work with you to close the gaps in a way that suits how your business actually operates. This may include:
- Implementing or refining technical controls (e.g. MFA, patching, logging)
- Creating or updating policies and procedures
- Training staff on key behaviours and responsibilities
The focus is always on practical, sustainable controls, not paperwork for the sake of it.
4. Certify
Prepare you for a successful audit or assessment
Once controls and documentation are in place, we help you prepare for the audit or assessment itself.
This can include:
- Reviewing evidence against the auditor’s expectations
- Running a pre-assessment or “mock audit”
- Supporting you with responses to questions from assessors or clients
The aim is simple: no surprises on the day and a smooth path to certification.
5. Maintain
Continuous governance and readiness support
Compliance isn’t a one-off event. We help you stay ready for renewals, re-certifications, and new client questions with ongoing support options, such as:
- Regular reviews of key controls and risks
- Updates to policies and documentation as things change
- Support responding to new security questionnaires and due diligence requests
This keeps you in a state of continuous readiness, not last-minute panic.
Turn Requirements Into Opportunities
Whether you’re responding to a specific tender or building a long-term compliance roadmap, Aursec can guide you through every step, from requirement to certification and beyond.
Contact us
Email: info@aursec.co.uk
Phone: 07761 239 707