IASME Cyber Assurance for Schools

Why schools and academy trusts certify to Cyber Assurance

For multi-academy trusts and larger schools, Cyber Essentials is the baseline and Cyber Assurance is the next step: it evidences an actual information-governance system across the trust, which is what auditors, funders and larger data-sharing partners increasingly expect.

Trust-wide governance. A multi-academy trust is a data-heavy organisation; Cyber Assurance evidences governance across all its schools, not just technical controls.
Beyond the baseline. Where a partner, funder or auditor wants more than Cyber Essentials, Cyber Assurance answers it without ISO 27001 cost.
Pupil and staff data. Level 2 includes a GDPR assessment, directly relevant to the personal data a trust holds at scale.

Supported from scope to certificate

Solusec takes you from where you are to a Cyber Assurance certificate: honest scoping, the documentation and controls sorted with you, and, as a Certification Body qualified for both Cyber Essentials and Cyber Assurance, we tell you exactly what the standard looks for rather than leaving you to guess.

Level 1 and Level 2

Level 1 is a verified self-assessment across the standard's 13 themes, reviewed by an assessor. Level 2 adds an independent, in-depth audit of your governance, documentation and controls, includes a GDPR assessment, and carries international recognition; a Level 2 certificate is valid for up to three years, with Level 1 renewed annually. We will tell you which level your requirement actually needs.

One prerequisite: you must hold a valid Cyber Essentials certificate throughout the Cyber Assurance period. If you do not yet have it, we help you with both.

Where it fits

Cyber Essentials first (it is the prerequisite), then Cyber Assurance where clients or funders want more than the baseline, and full ISO 27001 only if a contract genuinely demands it. Most schools and academy trusts get everything they need from Cyber Assurance.

Ready to buy?

IASME Cyber Assurance pricing, in line with IASME’s fee bands. Cyber Essentials certification is a prerequisite and is priced separately. By default we give you access to the IASME portal to complete your assessment yourself. Your submission is reviewed by a qualified, certified assessor, never fed into AI. Need it faster? Add urgent turnaround below. Want us to review your setup against the controls before you apply? That is a gap analysis, quoted separately: ask for one using the contact button under the form. Buy Level 1 now, or request a quote for the audited Level 2.

An appointed IASME Certification Body: your certificate comes directly from us. Verify our credentials on the BlockMark registry, and find us listed on the IASME website.

Business name

Certification level

Business size

Telephone

Optional add-on

Tick it if you need it.

Urgent turnaroundMoved to the front of the queue and assessed same day where your submission arrives before midday. +£100

Total: select your size + VAT

Want a gap analysis, a different way to pay, or a question answered first?

Gap analysis. We review your setup against the controls you will be assessed on before you apply and tell you exactly what needs fixing, so nothing is a surprise when you submit. It is quoted against your setup rather than sold as a fixed add-on, so ask us and we will price it.

Anything else. Paying by card here is the quickest route, not the only one. Tell us how you would rather pay and we will sort it. Same if you want a question answered before you buy, or a quote for on-site Cyber Essentials or IASME Cyber Assurance Level 1.

Common questions

We're a trust, not a company - is Cyber Assurance overkill?

Not for a larger trust. You are effectively a data-heavy organisation running many schools, and Cyber Assurance evidences governance across all of them at a cost built for the sector, well below ISO 27001.

Is it a credible alternative to ISO 27001?

For most organisations your size, yes. Level 2 is independently audited and internationally recognised, and it satisfies many buyers who would otherwise ask for ISO. If you later need ISO 27001 itself, Cyber Assurance is a clean stepping stone toward it.

Do Schools organisations need Cyber Essentials first?

Yes. A valid Cyber Essentials certificate is a prerequisite and must be held throughout the Cyber Assurance period. If you do not have it yet, we help you with both.

How do you help us achieve it?

We scope it with you, get the documentation and controls in shape, and, as a Certification Body qualified for both Cyber Essentials and Cyber Assurance, certify you, rather than leaving you to work it out alone.