NEURADigital
Talk to us
NeuraSec

Security readiness made simple

Know how ready you are, in language a board can use.

Security readiness at NeuraSec is a plain-English gap assessment and a practical plan. Customers, insurers and public-sector buyers ask about Cyber Essentials, about NCSC guidance, and sometimes about a managed approach to AI. We help you see the gap. We do not award the certificate, and we are not endorsed by the NCSC.

NeuraDigital is not a certification body and is not NCSC-assured. Nothing on this page is an accreditation, a certificate, or an NCSC, IASME or ISO endorsement. If you need a certificate, an independent accredited body issues it.

Talk to us about readiness See the standards we assess against

The bars people are actually asked about

Four references. One honest conversation.

We agree which of these you are being measured against before we look at anything. Assessing all of them “just in case” is a poor use of your time.

  • Cyber Essentials

    The UK government-backed baseline. Many customers, insurers and public-sector contracts ask for it, and some ask for the higher bar, Cyber Essentials Plus.

    We help you see what would need to be true, and in what order. We do not carry out the certification. The official scheme is described by the NCSC Cyber Essentials overview.

  • NCSC Cyber Assessment Framework

    The Cyber Assessment Framework, often shortened to CAF, is NCSC guidance used by organisations that run important services and need a structured view of how they manage cyber risk.

    We use it as a readiness reference: where you are strong, where the evidence is thin, and what a sensible improvement looks like. Using the framework is not the same as being assured or approved by the NCSC. The source is the NCSC Cyber Assessment Framework collection.

  • NCSC 10 Steps to Cyber Security

    A practical checklist of the basics: from governance and asset management through to incident response. Useful when the ask is “are the fundamentals in place?” rather than a formal scheme.

    Again, this is guidance we help you measure yourselves against. It is not an NCSC endorsement of NeuraDigital. See the NCSC 10 Steps collection.

  • ISO/IEC 42001

    ISO/IEC 42001 is the international standard for an AI management system: a managed, accountable way of running AI, rather than a one-off project. Buyers are starting to ask whether you have one.

    We assess the gap and help you prepare. We do not certify you against it. The standard itself is published by ISO. The practical controls around a live Copilot or agent rollout sit with secure and compliant AI.

How it runs

Agree the bar. Look at the evidence. Sequence the work.

The assessment on its own is a list of problems. The value is what gets decided about them.

  1. 01

    Agree what “ready” means here

    Cyber Essentials for a contract renewal is a different piece of work from a CAF-style view of an important service, or a first look at ISO/IEC 42001.

  2. 02

    Look at what is actually true

    What exists, what is only assumed, and where the evidence would not survive a straight question from a customer or a board.

  3. 03

    Leave a plan someone can run

    What matters, what can wait, who owns each item, and which fixes are quick. Your team, an existing supplier, or someone you still need to appoint can do the work.

What you leave with

Something you can act on, and something you can show.

  • A current position, in plain English

    Where you stand against the bar you chose, written so someone outside security can follow it.

  • The gaps that matter

    Not every theoretical improvement. The ones that would fail a sensible question, with the reason shown.

  • What can wait

    Explicitly. A list that treats everything as urgent is a list nobody will finish.

  • A sequenced plan with owners

    Ordered so each step is possible when it arrives, including quick wins where they genuinely exist.

  • A note for the person who asked

    A short version for the board, the customer or the insurer, without a translator.

  • A clear line on certification

    What still has to go to an accredited certification body if you want a certificate, and what we are not claiming.

An example

The kind of review.

  • A UK NHS trust

    A detailed review of cyber and the network, as part of digital readiness for a planned hospital. It is a review of the position. It is not a Cyber Essentials certificate, an ISO certificate, or NCSC assurance.

Being precise

This is a readiness review, not a badge.

  • We do not issue Cyber Essentials or Cyber Essentials Plus certificates.
  • We are not an NCSC-assured consultancy, and we do not imply NCSC endorsement.
  • We do not certify ISO/IEC 42001, or any other ISO standard.
  • We will not hand you a maturity percentage or a score out of ten.
  • We do not give legal advice.

If you need a formal certificate, we will help you understand what the certifier will look for, and point you at the right kind of organisation to issue it. An assessment that only ever recommends our own services would not be worth commissioning.

A score is easy to report. A prioritised list with an owner against each item is what changes the outcome.

Afterwards

The plan has to be delivered by somebody.

Often that is your own team. Where it is not, the rest of the group is there. There is no obligation to use them.

Your team delivers it

The usual outcome. The plan is written so it can be handed over, with owners and sequence already attached.

Someone operates the ongoing parts

Monitoring, patching, backup and identity administration are running jobs, not one-off fixes.

NeuraMSP managed IT

AI is part of the question

If the gap is about how you adopt Copilot or agents, or about using AI inside the security team, those are the other two NeuraSec services.

Secure and compliant AI

Questions

Short answers.

  • Does NeuraSec certify Cyber Essentials?

    No. NeuraSec helps you see the gap against Cyber Essentials or Cyber Essentials Plus and plan the work. NeuraDigital is not a certification body. The certificate, if you want one, is issued by an independent accredited certification body.

  • Is NeuraDigital NCSC-assured?

    No. NeuraDigital is not an NCSC-assured provider and is not endorsed by the NCSC. We use the NCSC Cyber Assessment Framework and the 10 Steps to Cyber Security as practical readiness references. That is not NCSC assurance or approval.

  • What is ISO/IEC 42001, and do you certify it?

    ISO/IEC 42001 is the international standard for an AI management system: a managed, accountable way of running AI. NeuraSec can assess the gap against it and help you prepare. We do not certify it. Certification is carried out by an accredited certification body.

  • What do we leave a readiness review with?

    A plain-English view of where you stand against the bar you care about, the gaps that matter, what can wait, a sequenced plan with owners, and a short note a board or a customer can read. You do not leave with a certificate or a score out of ten.

Start with the question you have been asked

Which standard is someone holding you to?

Bring us the contract clause, the board question or the insurer’s form. We will tell you whether a readiness review is the right next step.

Talk to us Back to NeuraSec