CCL-FORENSICS LIMITED
CREST and CHECK Penetration Testing
Our penetration testing services fully align with NCSC requirements, including CHECK and CREST accreditation. Delivered by highly qualified, security-cleared practitioners, our proven methodology follows industry standards. We are trusted as a critical line of defence for central and local government and critical national infrastructure systems.
Features
- Internal and external network penetration testing across enterprise environments.
- Web application and API penetration testing identifying exploitable vulnerabilities.
- Cloud security reviews for AWS, Azure, Microsoft 365, GCP.
- Operational technology security assessments for critical and industrial systems.
- Breakout testing to assess lateral movement and privilege escalation risks.
- Network and firewall reviews enhance security, compliance, prevent unauthorised access
- Wireless penetration testing identifying unauthorised access and configuration weaknesses.
- Mobile and desktop application penetration testing across supported platforms.
- Container and Docker security testing for misconfiguration and vulnerabilities.
- Red, Blue, and Purple team exercises simulating realistic attack scenarios.
Benefits
- Meets regulatory and accreditation requirements including NCSC, CHECK, and CREST.
- Identifies exploitable risks before attackers can compromise systems.
- Improves overall security posture across people, processes, and technology.
- Clear risk classification linking technical findings to business impact.
- Actionable remediation guidance supporting prioritised security improvements.
- Supports assurance for government, regulated, and critical infrastructure environments.
- Flexible engagement scheduling aligned with operational and business needs.
- Structured project management ensuring clear delivery and reporting.
- Identifies improvements across systems, software, processes, and procedures.
- Predictable pricing supporting procurement and budget certainty.
Cyber security audit and assurance
| £1,100.00 |
£1,100.00 |
| £1,250.00 |
£1,250.00 |
Cyber security governance and risk management
| £950.00 |
£950.00 |
| £1,175.00 |
£1,175.00 |
| £1,400.00 |
£1,400.00 |
Cyber security monitoring
| £650.00 |
£650.00 |
| £1,025.00 |
£1,025.00 |
| £1,400.00 |
£1,400.00 |
Cyber security incident response
| £680.00 |
£680.00 |
| £2,100.00 |
£2,100.00 |
| £3,520.00 |
£3,520.00 |
Cyber security vulnerability management
| £650.00 |
£650.00 |
| £1,025.00 |
£1,025.00 |
| £1,400.00 |
£1,400.00 |
Cyber security digital forensics
| £680.00 |
£680.00 |
| £1,220.00 |
£1,220.00 |
| £1,760.00 |
£1,760.00 |
Cyber security testing
| £950.00 |
£950.00 |
| £1,175.00 |
£1,175.00 |
| £1,400.00 |
£1,400.00 |
Cyber security secure design
| £950.00 |
£950.00 |
| £1,175.00 |
£1,175.00 |
| £1,400.00 |
£1,400.00 |
Standards and certifications
-
ISO/IEC 27001 certification
-
Yes
-
ISO/IEC 27001 accredited by
-
SGS
-
ISO/IEC 27001 accreditation date
-
Tuesday 24 October 2023
-
What the ISO/IEC 27001 doesn’t cover
-
Nothing. All CCL services listed on Gcloud 15 are covered by our ISO27001 certification.
-
ISO 28000:2022 certification
-
No
-
ISO 9001 certification
-
Yes
-
ISO 9001 certification accredited by
-
SGS
-
ISO 9001 accreditation date
-
Saturday 25 October 2025
-
What the ISO 9001 doesn’t cover
-
None, All CCL services listed on Gcloud 15 are covered by our ISO9001 certification.
-
Quality management systems (QMS)
-
Yes
-
CSA STAR certification
-
No
-
PCI certification
-
No
-
Cyber essentials
-
Yes
-
Cyber Essentials Certificate Number
-
248ab3da-d757-4d02-b71d-69cd0eb0cf17
-
Cyber essentials plus
-
Yes
-
Cyber Essentials Plus Certificate Number
-
46702f5d-c8cd-4e7b-8f63-6f6e357b2a5b
-
Other security certifications
-
No
Social value
-
Mission: Kick start economic growth
-
To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
-
Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
-
Plans to engage the contract workforce in deciding the most important workplace issues to address
-
Ensuring new workers are informed of their right to join a trade union
-
Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
-
Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
-
Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
-
Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
-
Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
-
Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
-
Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
-
Volunteering opportunities for staff
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at
tenders@cclsolutionsgroup.com.
Tell them what format you need. It will help if you say what assistive technology you use.