INDUSTRY

Public sector

Public sector and supplier environments often need baseline certification, control mapping, supplier assurance and practical vulnerability management.

APPLICABLE SERVICES

Start with the audits, scans and tests most relevant to public sector.

APPLICABLE AUDITS

Applicable audits

Framework readiness, certification preparation and compliance evidence work that commonly applies to this sector.

United KingdomCyber EssentialsUK organisations and suppliers seeking a recognised baseline certification United KingdomCyber Essentials PlusUK organisations needing independently tested Cyber Essentials controls GlobalISO 27001Organisations that need a structured information security management system Global, with strong US adoptionNIST CSF / 800-53Organisations aligning security controls with US government and industry guidance

APPLICABLE VULNERABILITY SCANS

Applicable vulnerability scans

Technical discovery work to find exposed, misconfigured or unpatched systems before they become incidents.

GlobalNetwork Vulnerability ScanningCompanies with routers, firewalls and internal networks GlobalAuthenticated (Credentialed) ScanningOrganisations needing deep internal system assessment GlobalHost-Based Vulnerability ScanningCompanies managing servers, workstations and endpoints GlobalCloud-Native Vulnerability ScanningCloud-first companies using containers, serverless services and managed cloud platforms

APPLICABLE PENETRATION TESTS

Applicable penetration tests

Human-led testing that validates real-world exposure across applications, networks, cloud and people/process controls.

GlobalNetwork Penetration TestingCompanies with internal or external network infrastructure GlobalWeb Application Penetration TestingSaaS, eCommerce and organisations with public-facing web applications GlobalSocial Engineering Penetration TestingOrganisations that want to test human and process resilience

These recommendations are a starting point. Final scope depends on people, business complexity, technology footprint, regulatory obligations and the systems that matter most to the sector.

Explore all services