Services / Prove and comply / Public sector assurance
04 · Public sector assurance
Meet the standard government expects.
Assurance for public bodies and their suppliers against the NCSC CAF, GovAssure, the NHS DSPT and Secure by Design, from cleared consultants who know how these frameworks are assessed in practice.
Assessment readiness
NCSC CAF · GovAssure · NHS DSPT · Secure by Design
- ✓ Scope and essential functions agreed
- ✓ Current profile assessed against outcomes
- ✓ Gaps prioritised against the target profile
- ✓ Evidence mapped to each outcome
- ✓ Improvement plan agreed
Ready for independent review →
Why it matters
Public bodies face rising expectations from government and regulators. These frameworks are assessed on outcomes, not paperwork.
Our cleared consultants have delivered assurance inside UK government, so your evidence stands up to scrutiny and your improvement plan is realistic.
Sound familiar?
01 Your organisation is in scope for GovAssure or a CAF-based assessment.
02 Your DSPT submission is due and the evidence is thin.
03 A new digital service needs security assurance before go-live.
How we help
Assurance that stands up to scrutiny.
01
Assess
- NCSC CAF assessments
Self-assessment support or independent review against CAF outcomes. - GovAssure preparation and support
Profile, scope and evidence ready for independent assurance review. - NHS DSPT submissions and evidence
Evidence gathered and mapped for health and care organisations. - NCSC Cloud Security Principles assurance
Assurance that cloud services meet the 14 principles.
02
Build securely
- Secure by Design for delivery teams
Practical support meeting the UK government Secure by Design principles. - Risk management for digital services
Proportionate risk assessment through the service lifecycle. - Service go-live security assurance
Confidence that a new service is ready before launch.
03
Specialist support
- Assurance for policing and justice systems
NPPV-vetted consultants for law enforcement environments. - Supplier assurance for public contracts
Helping suppliers meet government security requirements. - Buying through G-Cloud 15
Procure quickly and compliantly through the Digital Marketplace.
Aligned to
NCSC CAF · UK GovAssure · NHS DSPT · UK Secure by Design · NCSC Cloud Security Principles
A typical engagement
Five steps. Confidence going into assessment.
01
Scoping call
Free, 30 minutes, with a cleared consultant.
02
Profile and scope
Essential functions, systems and target profile agreed.
03
Assessment
Your current position assessed against each outcome.
04
Improvement plan
Prioritised actions and evidence mapped to the framework.
05
Review and beyond
Support through independent review, and ongoing improvement.
What you walk away with
■ Confidence going into assessment
■ Evidence mapped to each framework outcome
■ Cleared and vetted consultants
Who you work with
Assurance from people who have done it inside government.
Security cleared
UK government clearance for sensitive environments.
NPPV vetted
Cleared to work with police and law enforcement.
G-Cloud 15
Buy direct through the Digital Marketplace.
Related services
Facing a CAF or GovAssure assessment?
Book a free 30-minute call with a cleared consultant.