Home / Consultancy
Consultancy and fractional security
When the templates are not enough, get experienced help, from a single gap analysis to an ongoing part-time Head of Information Security.
Many small businesses can implement ISO 27001 themselves with the right templates. Others want an expert to get them started, check their work or run the ISMS alongside them. Our services are designed to fill exactly those gaps, delivered remotely across the UK, with on-site visits by arrangement.
One-off services
A review of where you are now against ISO/IEC 27001:2022, with a prioritised plan of what to do next. Ideal before you start, or if a customer has just asked for certification.
from £1,500, fixed price
Hands-on help to get your ISMS in place: scoping, risk assessment workshops, tailoring policies and the Statement of Applicability, and coaching whoever will run it.
£950 per day, or blocks of days
ISO 27001 requires internal auditors who are independent of the work they audit, which is hard in a small team. We carry out some or all of your audits and write them up using the audit kit.
£950 per audit day; a small business's full annual programme is typically 2 to 3 days
A mock audit a few weeks before your Stage 2 certification audit, so there are no surprises on the day.
from £1,250, fixed price
Help answering security due diligence questionnaires from customers and tenders, accurately and consistently.
from £395 per questionnaire
A check of your devices, accounts and network settings against the Cyber Essentials requirements before you apply.
from £595, fixed price (certification fee not included)
Fractional Head of Information Security
Most small businesses do not need a full-time head of information security, but they do need someone experienced to run the ISMS, answer to auditors and customers, and keep things on track. A fractional service gives you that for a set number of days each month.
| What is included | Light£900 per month | Standard£1,700 per month | ExtendedTalk to us price on request |
|---|---|---|---|
| Time each month | 1 day | 2 days | 4 days or more, by arrangement |
| Best for | Businesses that run their own ISMS and want expert oversight | Certified small businesses that want someone to run the ISMS cycle with them | Implementing ISO 27001 from scratch, or larger and busier businesses |
| Named contact for your ISMS, auditors and customers | Yes | Yes | Yes |
| Risk register and Statement of Applicability kept up to date | Yes | Yes | Yes |
| Management reviews prepared and attended | Yes | Yes | Yes |
| Internal audit programme carried out | – | Yes | Yes |
| Supplier reviews and customer questionnaires | – | Yes | Yes |
| Support at certification and surveillance audits | – | Yes | Yes |
| Policy updates, staff training and incident support | – | – | Yes |
How the fractional service works
- What a day means: 7.5 hours of work, which can be split into shorter sessions across the month to suit you.
- Unused time: unused hours can be carried over to the following month only; after that they expire.
- Extra time: additional days, and urgent incident support beyond your monthly hours, are charged at our day rate of £950, pro rata, by agreement.
- Incident support: provided on a best-endeavours basis during UK working hours. It is not a 24-hour emergency response service.
- Term: minimum term of 3 months, then rolling monthly with one month's notice.
How it works
Free introductory call
A 30-minute call to understand where you are and what you need. No obligation.
Clear proposal
A short written proposal with a fixed price or agreed number of days, so you know the cost before we start.
The work
Delivered remotely, using the Waymark templates and tools so you keep everything we produce.
Follow-up
A short check-in afterwards to make sure the work has done its job.
Already bought the Complete pack? Your free one-hour consultation is a good place to start. If you then book further services within 90 days, we will deduct the cost of your pack from the first invoice.
Talk it through
Book a free 30-minute introductory call, or email us with what you need. We take on a limited number of clients at a time.
Book a call or email us