IASME Cyber Assurance for Accountants

Why accountancy and bookkeeping firms certify to Cyber Assurance

For firms with larger clients, or handling particularly sensitive engagements, Cyber Assurance evidences a genuine information-security management system, the level corporate clients and referrers increasingly want, at a fraction of ISO 27001 cost.

Corporate client requirements. Larger clients and referrers increasingly want evidence beyond the baseline before sharing sensitive financials.
Data protection. Level 2's GDPR assessment fits a practice's handling of personal and financial data.
ISO alternative. It answers clients who might otherwise ask for ISO 27001, at SME cost.

Supported from scope to certificate

Solusec takes you from where you are to a Cyber Assurance certificate: honest scoping, the documentation and controls sorted with you, and a certified IASME assessor — qualified for both Cyber Essentials and Cyber Assurance — who tells you exactly what the standard looks for rather than leaving you to guess.

Level 1 and Level 2

Level 1 is a verified self-assessment across the standard's 13 themes, reviewed by an assessor. Level 2 adds an independent, in-depth audit of your governance, documentation and controls, includes a GDPR assessment, and carries international recognition; a Level 2 certificate is valid for up to three years, with Level 1 renewed annually. We will tell you which level your requirement actually needs.

One prerequisite: you must hold a valid Cyber Essentials certificate throughout the Cyber Assurance period. If you do not yet have it, we help you with both.

Where it fits

Cyber Essentials first (it is the prerequisite), then Cyber Assurance where clients or funders want more than the baseline, and full ISO 27001 only if a contract genuinely demands it. Most accountancy and bookkeeping firms get everything they need from Cyber Assurance.

Common questions

Our biggest client is asking for more than Cyber Essentials - is Cyber Assurance enough?

Usually, yes. Cyber Assurance Level 2 is independently audited and internationally recognised and satisfies most corporate clients who want evidence of a real security-management system, without ISO 27001 cost.

Is it a credible alternative to ISO 27001?

For most organisations your size, yes. Level 2 is independently audited and internationally recognised, and it satisfies many buyers who would otherwise ask for ISO. If you later need ISO 27001 itself, Cyber Assurance is a clean stepping stone toward it.

Do we need Cyber Essentials first?

Yes. A valid Cyber Essentials certificate is a prerequisite and must be held throughout the Cyber Assurance period. If you do not have it yet, we help you with both.

How do you help us achieve it?

We scope it with you, get the documentation and controls in shape, and — with a certified IASME assessor qualified for both Cyber Essentials and Cyber Assurance guiding you — support you through the assessment so you pass, rather than leaving you to work it out alone.