One programme that combines the cloud readiness assessment, a compliance-ready landing zone and certification readiness: Cyber Essentials Plus in the UK, an ISO 27001 gap assessment elsewhere.
The organisations under the most pressure right now are the ones facing two deadlines at once: servers going out of support and a customer or regulator asking for a certification. Doing those as two separate projects with two separate suppliers doubles the cost and halves the coherence.
Secure Foundations treats them as one piece of work. The assessment tells us what to move and what the certification will require. The landing zone is built so that it satisfies both. The certification readiness then uses the evidence the landing zone produces, instead of asking you to create it from scratch.
It is the engagement we recommend most often to SMEs and charities, because it gets the two things that are keeping leadership up at night done together, by the same team, in the same quarter.
What you run, what depends on what, and the order to move it in. Written with the certification requirements in view from day one.
Accounts, identity, MFA, logging, encryption, backup and network controls built as code, mapped to the Cyber Essentials and ISO 27001 controls they satisfy.
Cyber Essentials Plus readiness in the UK, or an ISO 27001 gap assessment and remediation plan elsewhere, using the landing zone as the evidence base.
The migration itself and the monthly cost and posture review are scoped as the next steps, with the assessment fee credited.
Deadlines, drivers and which certification applies.
Estate and controls reviewed together. One plan, one timeline.
Landing zone built as code, mapped to the controls it satisfies.
Readiness work done against the evidence the landing zone produces.
Migration waves and the retainer, scoped with the assessment credited.
Yes. Each phase stands on its own, and the assessment is always first. The bundle simply makes the three cheaper and more coherent together.
A quarter is typical for a small or mid-size organisation, with the assessment in the first few weeks and the readiness work overlapping the build.
No. In the UK the certification element is Cyber Essentials Plus. Elsewhere it is an ISO 27001 gap assessment, and we quote in your currency.
AWS first, Azure where you are Microsoft-led. From readiness assessment to landing zone to migration, and the retainer that keeps it tight.
Hands-on readiness for Cyber Essentials Plus, ISO 27001 and SOC 2, plus a vCISO retainer. We prepare, an accredited body certifies.
Book a free 30-minute readiness call. We tell you plainly what you need, roughly what it costs, and whether you need us yet.