Services

Practical, proportionate security services for regulated SMBs.

Whether you’re pursuing your first Cyber Essentials certificate, building an ongoing compliance programme, or tackling a major security project — Reconfort has the right service for where you are.

Certification

Cyber Essentials & Cyber Essentials Plus

Cyber Essentials is the UK government-backed certification scheme that protects organisations against the most common cyber attacks. For many regulated businesses, it’s a client requirement, an insurer requirement, or both.

Reconfort guides you through the entire process — from self-assessment to evidence gathering and submission — making sure you pass first time. For Cyber Essentials Plus, we also manage the independent technical verification.

Scoping and preparation

We help you define your scope correctly, identify relevant systems, and understand what evidence you’ll need.

Application support

Guided completion of the self-assessment questionnaire — with explanations and examples at every step.

Plus technical verification

Independent testing for Cyber Essentials Plus, managed and coordinated by the Reconfort team.

Renewal support

Annual renewal made simple — especially when paired with our Vaisette compliance portal.

Who this is for

Cyber Essentials is suitable for any UK organisation, but is particularly valuable for businesses that:

Pro tip

Pair your Cyber Essentials certification with Vaisette to maintain compliance continuously — and make renewal one click every year.

Vaisette — your security programme, sorted.

Vaisette is Reconfort’s self-serve security management portal for regulated SMBs. It takes the foundations of your Cyber Essentials application, adds the IASME Cyber Assurance controls layer, and gives your team a simple, structured way to manage compliance all year round.

No more scrambling at renewal time. No more missing evidence. Just a clear, continuous picture of your security programme — with Reconfort’s team supporting you every step of the way.

What’s included
Controls management

CE and IASME Cyber Assurance controls pre-mapped. Assign owners, track status, and upload evidence as you go.

Asset register & contacts

Keep your key information current and in one place, integrated with your controls programme.

Actions register

Quarterly follow-up on outstanding tasks. Every action has an owner, a due date, and a status.

Standing documents

Policies and evidence where your team can actually find them — not buried in email threads.

Quarterly compliance scorecard

Plain-English report for leadership or regulators — every quarter, without manual prep.

Auto certification submission

CE and IASME Cyber Assurance submission ready when you are. One click.

Built-in support

Self-serve doesn't mean unsupported.

Monthly threat intelligence

Industry-relevant newsletter covering threats in your sector.

Monthly awareness videos

Short, watchable content for your wider team.

Ad-hoc alerts

Urgent threat notifications when they matter most.

Quarterly specialist meeting

1 hour with a Reconfort specialist every quarter.

How it works

  1. Start from your Cyber Essentials application — IASME controls added on top
  2. Assign controls, track evidence, and receive quarterly analyst reviews
  3. Quarterly scorecard + one-click certification when renewal comes around

On-demand expertise

Virtual CISO (vCISO)

Senior security leadership, on demand. Our vCISO service gives regulated SMBs access to the strategic guidance, risk expertise, and board-level communication that would ordinarily require a full-time Chief Information Security Officer.

Tailored to your business, your sector, and the maturity level of your current security programme. Scaled as you need it — from a few days a month to a more intensive engagement during a critical period.

Security strategy

A clear, proportionate security strategy aligned to your business objectives and regulatory obligations.

Board & leadership reporting

Plain-English risk reporting that gives leadership the picture they need to make informed decisions.

Regulatory liaison

Support navigating regulatory expectations — from ICO to FCA to sector-specific frameworks.

Incident response leadership

When something goes wrong, experienced leadership to guide your response, minimise impact, and manage communications.

Specialist expertise, without the full-time price tag.

“Your reputation is everything. Having experienced security leadership when it matters most isn’t a luxury — it’s essential.”

— Reconfort vCISO Practice

Security Projects

For organisations tackling specific, time-bounded security objectives — from ISO 27001 implementation to DORA readiness to technical security assessments. Structured projects delivered by specialists who understand regulated sectors.

ISO 27001

Implementation of the international standard for information security management. From gap analysis through to certification.

DORA Readiness

Digital Operational Resilience Act compliance for financial services entities. Assessment, gap analysis, and remediation planning.

Penetration Testing

Independent testing of your technical controls — network, application, and social engineering assessments.

Security Assessments

Baseline assessment of your current security posture — identifying gaps, prioritising actions, and producing a clear remediation roadmap.

“We’ve helped clients through Cyber Essentials, ISO 27001 implementations, and everything in between. Vaisette is our way of making that expertise available to every client — not just the ones with big security budgets.”

— Reconfort Team

Our project approach

  1. Scoping and objectives — clear definition of what success looks like
  2. Gap analysis — understanding where you are against where you need to be
  3. Structured delivery — phased implementation with clear milestones
  4. Handover and sustainability — ensuring your team can maintain what we build

“Protecting your business today — Cultivating resilience for tomorrow.”

Not sure which service is right for you?

Talk to the Reconfort team — we’ll help you understand where your priorities lie and which combination of services fits your business.