Skip to main content
Digital Marketplace

Beta Help us improve the Digital Marketplace - send your feedback

SYSGROUP TRADING LIMITED

Cyber Consulting

SysGroup Cyber Consulting provides professional cybersecurity advisory services to assess, improve and maintain organisational security. The service delivers outcome-focused support across governance, risk, compliance, security strategy, assurance and incident preparedness, producing practical, audit-ready outputs aligned to business and regulatory requirements.

Features

  • Cyber risk assessment and prioritisation aligned to business objectives
  • Security strategy development and maturity roadmap creation
  • Governance, risk and compliance advisory against recognised standards
  • Security architecture review and secure design recommendations
  • Independent security assurance and compliance readiness assessments
  • Penetration testing and technical security validation activities
  • Incident preparedness, tabletop exercises and response planning
  • Clear remediation plans with actionable, prioritised recommendations
  • Audit-ready evidence packs and documentation support
  • Flexible delivery remotely, on-site or hybrid

Benefits

  • Reduces cyber risk through clear prioritisation and actionable remediation plans
  • Improves decisions with risk based security insights and maturity scoring
  • Accelerates compliance readiness with structured audit preparation and evidence packs
  • Reduces audit effort through clear documentation and defensible security evidence
  • Improves security posture without long term in house specialist recruitment
  • Enables faster remediation by focusing effort on highest impact risks
  • Improves incident preparedness through realistic scenarios tabletop exercises and planning
  • Reduces wasted effort by aligning security activity to business priorities
  • Provides clear security roadmaps supporting structured and measurable improvement
  • Improves stakeholder confidence with clear reporting and executive ready outputs

Pricing

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@sysgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

8 5 1 8 9 3 1 7 1 5 3 4 0 6 4

Contact

SYSGROUP TRADING LIMITED Matt Woudberg
Telephone: 0333 101 9000
Email: hello@sysgroup.com

About the service

Service categories
  • Cloud Support Services
    • Security Services
      • Security strategy
        • Security strategy
      • Security risk management
        • Security risk management
      • Security design
        • Security design
      • Security incident management
        • Security incident management
      • Security audit services
        • Security audit services
      • Security quality assurance (QA) and testing
        • Security quality assurance (QA) and testing
      • Other
        • Other

Service scope

Service constraints
SysGroup Cyber Consulting is an advisory and professional services offering, not a SaaS or fully managed operational service. Delivery is constrained by the agreed Statement of Work, which defines scope, deliverables, timelines, and resourcing; activities outside scope require formal change control. The service does not include continuous monitoring, tooling, or operational management unless explicitly contracted. Delivery depends on timely customer access to systems, data, documentation, and stakeholders. SysGroup provides recommendations, assurance, and remediation guidance, but implementation responsibility remains with the customer unless hands-on remediation is scoped. On-site delivery is subject to availability and scheduling. The service does not provide sign-off.

User support

Email or online ticketing support
No
Phone support
No
Web chat support
No
Support levels
SysGroup Cyber Consulting is delivered as a professional consultancy service, rather than a tiered managed support model.

Support levels provided:
Support is provided through time-and-materials engagements or fixed-scope Statements of Work, agreed prior to commencement. Each engagement defines scope, deliverables, timelines and consultant involvement. Services include advisory, assessment, assurance, testing and incident preparedness activities, delivered remotely, on-site or in a hybrid model.

Cost of support levels:
Pricing is agreed in advance within the Statement of Work. Costs are based on consultant time or fixed-scope delivery, with any additional scope or effort subject to mutual agreement. Travel, subsistence and third-party costs are charged at cost where applicable.

Account and engineering support:
The service is delivered by experienced cyber security consultants with recognised certifications. A named engagement lead or consultant is assigned for delivery and coordination. The service does not include a technical account manager or cloud support engineer, as it is not an ongoing managed service.

Supplier type

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Security Clearance (SC)

Pricing

Discount for educational organisations
No

Architecture roles

Enterprise architect
Role level UK Rate Offshore Rate
Enterprise architect £1,375.00
Senior enterprise architect £1,595.00
Lead enterprise architect £2,000.00
Principal enterprise architect £2,500.00
Network architect
Role level UK Rate Offshore Rate
Network architect £1,000.00
Lead network architect £1,350.00
Security architect
Role level UK Rate Offshore Rate
Security architect £1,375.00
Lead security architect £1,595.00
Principal security architect £2,000.00
Technical architect
Role level UK Rate Offshore Rate
Technical architect £1,000.00
Senior technical architect £1,000.00
Lead technical architect £1,350.00
Principal technical architect £1,350.00

Chief digital and data roles

Chief information security officer
Role level UK Rate Offshore Rate
Chief information security officer £3,000.00

Cyber security roles

Cyber security audit and assurance
Role level UK Rate Offshore Rate
Lead cyber security audit and assurance £1,375.00
Principal cyber security audit and assurance £1,595.00
Cyber security governance and risk management
Role level UK Rate Offshore Rate
Associate cyber security governance and risk manager £1,250.00
Lead cyber security governance and risk manager £1,375.00
Principal cyber security governance and risk manager £1,595.00
Cyber security monitoring
Role level UK Rate Offshore Rate
Associate cyber security monitoring £1,250.00
Cyber security vulnerability management
Role level UK Rate Offshore Rate
Associate cyber security vulnerability management £1,250.00
Lead cyber security vulnerability management £1,375.00
Principal cyber security vulnerability management £1,595.00
Cyber security testing
Role level UK Rate Offshore Rate
Associate cyber security testing £1,250.00
Lead cyber security penetration testing £1,375.00
Principal cyber security testing £1,595.00
Cyber security secure design
Role level UK Rate Offshore Rate
Associate cyber security secure systems architecture and design £1,250.00
Lead cyber security secure systems architecture and design £1,595.00
Principal cyber security secure systems architecture and design £2,000.00

IT operations roles

Infrastructure engineer
Role level UK Rate Offshore Rate
Infrastructure engineer £850.00
Senior infrastructure engineer £1,000.00
Lead infrastructure engineer £1,350.00
Principal infrastructure engineer £1,350.00
Infrastructure operations engineer
Role level UK Rate Offshore Rate
Infrastructure operations engineer £850.00
Senior infrastructure operations engineer £1,000.00
Lead infrastructure operations engineer £1,350.00
Principal infrastructure operations engineer £1,350.00
Service desk manager
Role level UK Rate Offshore Rate
Service desk analyst £850.00
Senior service desk analyst £1,000.00
Service desk manager £1,000.00
Head of service desk £1,000.00

Standards and certifications

ISO/IEC 27001 certification
Yes
ISO/IEC 27001 accredited by
Citation ISO Certification
ISO/IEC 27001 accreditation date
Wednesday 12 January 2022
What the ISO/IEC 27001 doesn’t cover
Our ISO/IEC 27001 certification applies exclusively to the Information Security Management System (ISMS) supporting the provision of Managed IT Services, including Strategic Consultancy, IT Support, Cloud Services, Data Centre Services, Security Solutions and Connectivity.

Activities falling outside this defined scope are not covered. This includes any services not directly related to the delivery or management of these managed IT services, such as standalone hardware resale, third-party services delivered under the supplier’s own certifications, customer-managed environments not operated or administered by us, and internal corporate functions not impacting service delivery. Where third parties are involved, assurance is managed through contractual and supplier risk controls rather than our certification.
ISO 28000:2022 certification
No
ISO 9001 certification
Yes
ISO 9001 certification accredited by
QMS International
ISO 9001 accreditation date
Wednesday 23 February 2022
What the ISO 9001 doesn’t cover
SysGroup’s ISO 9001 certification applies to the delivery of IT Managed Services, including Strategic Consultancy, IT Support, Cloud Services, Data Centre Services, Security Solutions, and Connectivity. Any services, activities, or offerings that fall outside these defined service areas are not covered by the ISO 9001 certification.
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
Yes
PCI DSS certification accredited by
Locked Stack
PCI DSS accreditation date
Tuesday 30 September 2025
What the PCI DSS doesn’t cover
Our certification covers the below:
Hosting Services:
- hardware, infrastructure/networking, storage, security services, multi-tenant service provider
Managed Services:
- Systems security services, IT support
Cyber essentials
Yes
Cyber Essentials Certificate Number
9fd2a9c4-5f8e-44de-90e6-8a2610a05278
Cyber essentials plus
No
Cyber Essentials Alternative
In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
Other security certifications
No

Social value

Mission: Kick start economic growth

To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
Mission: Build an NHS fit for the future

That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
  • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@sysgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.