-
ISO/IEC 27001 certification
-
Yes
-
ISO/IEC 27001 accredited by
-
DNV Business Assurance UK Limited
-
ISO/IEC 27001 accreditation date
-
Monday 1 December 2025
-
What the ISO/IEC 27001 doesn’t cover
-
All ARO's services submitted to G-Cloud are covered, within the full scope included below. Nothing outside of the scope is covered: Provision of IT and Telecommunications Services (AV and Video Conferencing, Business Mobile, Cloud Telephony, Contact Centre, Cyber Security, Data Centre Services, Data services, IT, Software Development, Mobile Data) in accordance with the Statement of Applicability, version 1.0, plus Code of Practice ISO 27017:2015 on information security controls for cloud services and Code of Practice ISO 27018:2019 for protection of personally identifiable information (PII) in public clouds.
-
ISO 28000:2022 certification
-
No
-
ISO 9001 certification
-
Yes
-
ISO 9001 certification accredited by
-
DNV Business Assurance UK Limited
-
ISO 9001 accreditation date
-
Friday 1 December 2023
-
What the ISO 9001 doesn’t cover
-
All ARO's services submitted to G-Cloud are covered, within the full scope included below. Nothing outside of the scope is covered: Provision of IT and Telecommunications Services (AV and Video Conferencing, Business Mobile, Cloud Telephony, Contact Centre, Cyber Security, Data Centre Services, Data services, IT, Software Development, Mobile Data).
-
Quality management systems (QMS)
-
Yes
-
CSA STAR certification
-
No
-
PCI certification
-
No
-
Cyber essentials
-
Yes
-
Cyber Essentials Certificate Number
-
Bfeb01f3-8386-4dfa-b3a9-078b0111c144
-
Cyber essentials plus
-
Yes
-
Cyber Essentials Plus Certificate Number
-
1b2adc2c-4104-4659-93b5-35908194c9b4
-
Other security certifications
-
Yes
-
Any other security certifications
-
NHS DSP Toolkit