SECURE SCHOOLS LTD

Secure Schools Cyber Security Audit, Consultancy and Certification Service

Secure Schools Cyber Security Audit, Consultancy and Certification Service provides a governance, risk and compliance review of schools and academy trusts against DfE, ESFA and ICO expectations. The service assesses strategy, policies and practices, aligned to Cyber Essentials and relevant school handbooks.

Features

• Independent cyber security governance and compliance assessment
• Alignment against DfE, ESFA and ICO expectations
• Cyber Essentials readiness and gap analysis
• Policy, documentation and strategy review
• Risk identification and prioritisation
• Technical and organisational control assessment
• Evidence-based audit reporting
• Practical remediation recommendations
• Optional certification readiness support
• Senior leadership and trustee-level reporting

Benefits

• Clear understanding of cyber security maturity
• Reduced regulatory and compliance risk
• Improved readiness for Cyber Essentials certification
• Actionable roadmap for security improvement
• Increased assurance for governors and trustees
• Better alignment with sector expectations
• Identification of critical security weaknesses
• Strengthened organisational cyber resilience
• Improved accountability and governance oversight
• Independent assurance for stakeholders

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@secureschools.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

532756239920187

Contact

Neil Roach
01638438186
tenders@secureschools.com

About your service

• Service categories:

  Cloud Support Services

  Security Services

  • Security strategy
  • Security risk management
  • Security audit services

Service scope

• Service constraints: The service is primarily delivered remotely using secure online meetings and document review. On-site delivery can be provided by agreement and may incur additional cost. The service provides assurance, recommendations and certification readiness support, but does not include implementation of technical controls or ongoing operational security management. Buyer cooperation is required to provide timely access to relevant documentation, systems information and stakeholders. Delivery timescales may be affected where required information is incomplete or delayed.

User support

• Email or online ticketing support: Yes
• Support response times: Secure Schools provides email-based support for buyer queries during delivery of the service. Queries are acknowledged within one business day, Monday to Friday, during UK business hours. Responses are typically provided within two business days, depending on complexity. Weekend and bank holiday support is not included as standard but can be agreed in advance where required.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Where digital communication is required, Secure Schools uses standard, widely adopted tools for email and online meetings that are designed to meet recognised accessibility standards. Written outputs are provided in accessible formats on request, and reasonable adjustments can be made to support buyer needs in line with the Equality Act 2010.
• Support levels: Secure Schools provides a single standard support level as part of the Cyber Security Audit, Consultancy and Certification Service.; ; Support is delivered via email during UK business hours, Monday to Friday. This includes clarification of findings, questions on reports, and guidance related to audit outcomes and recommendations. There is no additional charge for standard support during the agreed delivery period.; ; A named consultant is assigned for the duration of the engagement and acts as the primary point of contact. This role provides continuity and subject matter expertise but does not include ongoing technical account management or cloud operations support.; ; Enhanced support options, including extended availability, on-site support, or additional consultancy beyond the agreed scope, can be provided by prior agreement and are priced separately on a time and materials basis.
• AI chatbot: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Pricing

• Discount for educational organisations: Yes

Cyber security roles

Cyber security audit and assurance

Role level	UK Rate	Offshore Rate
Lead cyber security audit and assurance	£800.00

Cyber security governance and risk management

Role level	UK Rate	Offshore Rate
Associate cyber security governance and risk manager	£800.00
Lead cyber security governance and risk manager	£800.00
Principal cyber security governance and risk manager	£800.00

Cyber security vulnerability management

Role level	UK Rate	Offshore Rate
Associate cyber security vulnerability management	£800.00
Lead cyber security vulnerability management	£800.00
Principal cyber security vulnerability management	£800.00

Cyber security digital forensics

Role level	UK Rate	Offshore Rate
Associate cyber security digital forensics	£800.00
Lead cyber security digital forensics	£800.00
Principal cyber security digital forensics	£800.00

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BMTrada
• ISO/IEC 27001 accreditation date: Thursday 11 September 2025
• What the ISO/IEC 27001 doesn’t cover: The Beyond Information Security Management System (ISMS) encompasses all; Beyond & associated company employees, listed Beyond associated company; office locations, Beyond & associated company owned technology and data; assets, and Beyond & associated company business processes that deliver; Beyond & associated company products and services.; Statement of Applicability v1.0
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: B959cc9b-ab7c-4849-81b3-4ce87d8039ae
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: C8a5290a-d875-42f9-9696-1f821b61d78c
• Other security certifications: Yes
• Any other security certifications: ISO:27001

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@secureschools.com. Tell them what format you need. It will help if you say what assistive technology you use.