Cyber Security Gap Analysis
CYBER SECURITY & CYBER ESSENTIALS GAP ANALYSIS
Cyber security gap analysis: know exactly where you stand.
An independent assessment of your security against Cyber Essentials and ISO 27001, showing precisely where the gaps are and what to fix first, in plain English rather than a jargon-filled tick-box.
Delivered by a UKAS ISO/IEC 27001:2022 certified team · Since 2006
UKAS ISO/IEC 27001:2022 Certified · Cyber Essentials Practitioners · Microsoft Solutions Partner · Certified 3CX Partner · RIPE NCC Member · 20 Years Supporting UK SMEs
What a cyber security gap analysis actually is
A gap analysis is a structured check of where your security is now against where it needs to be, whether that benchmark is Cyber Essentials, ISO 27001, an insurer’s requirements or a client’s due-diligence questionnaire. It tells you, plainly, which controls you already meet, which you don’t, and which matter most.
It is the sensible first step before certification, before renewing cyber insurance, or simply before you can honestly answer the question every business now gets asked: “how secure are you?” Guessing is expensive. A gap analysis replaces the guesswork with a clear, prioritised picture.
You can’t fix what you can’t see. A gap analysis is how you see it.
What we assess
- The five Cyber Essentials controls – firewalls, secure configuration, access control, malware protection and patch management.
- Identity and access – MFA, admin rights, password policy and leaver processes.
- Data protection and backup – what you hold, where it lives, and whether backups are tested and recoverable.
- Email and endpoint security – phishing defences, filtering and business-grade protection.
- Network and connectivity – firewalls, segmentation and remote-access security.
- Microsoft 365 and cloud configuration – security settings that are often left at their weak defaults.
- Policies and people – the written and human side that certifications and insurers ask about.
- Incident readiness – whether you have a plan for when, not if, something goes wrong.
What you get
A plain-English report
Your current position against the standard, written so decision-makers can act on it, not just technical staff.
A prioritised action list
The gaps that matter most first, with the quick wins and the bigger projects clearly separated.
A realistic route to certification
If Cyber Essentials or ISO 27001 is the goal, a clear path to getting there without surprises.
No obligation to use us
The findings are yours. You can act on them yourself, with your current provider, or with us.
Why have us do it
We live this standard
We are UKAS ISO/IEC 27001:2022 certified ourselves, so we assess you against controls we run every day, not from a textbook.
Practical, not just a checklist
Cyber Essentials Practitioners who translate findings into what to actually do, in what order, for your business.
Independent and honest
A straight assessment of where you stand, including the things a sales-led review would quietly skip.
Local and accountable
A Gloucestershire team you can actually get hold of, supporting UK businesses since 2006.
Frequently Asked Questions – Cyber security gap analysis
It depends on your size and the standard you are working towards. Get in touch and we will scope it clearly and fixed, with no obligation to proceed.
No. A gap analysis is the step before certification: it shows what you need to fix to pass. We can then support you through Cyber Essentials or ISO 27001 itself if you choose.
For most SMEs the assessment is quick, with the report and prioritised actions back with you shortly after, so you are not left waiting to act.
No. The findings are yours to use however you like. Many clients use the report to improve their setup with their existing team.
We are UKAS ISO/IEC 27001:2022 certified and Cyber Essentials Practitioners, so we assess you against standards we hold ourselves.
Request your cyber security gap analysis
Find out exactly where your security stands and what to fix first, with a plain-English report and a prioritised action list.
Or call us directly: 01452 701355 · Business enquiries only · Response within one working day · No obligation.
A gap analysis pairs naturally with Cyber Essentials certification and our wider cyber security services. It is also a strong first step into fully managed IT support, where we close the gaps and keep them closed.
What our clients say
Real reviews from the businesses we support, straight from Google.