Your clients need Cyber Essentials. Your engineers have better things to do.

The split that makes sense

Certification has two kinds of work in it. The technical work — MFA rollout, patching discipline, retiring unsupported kit, configuration — is MSP work: billable, valuable, and yours. The certification work — scoping the entity correctly, drafting accurate questionnaire answers, board declarations, handling assessor queries inside their response windows — is paperwork craft that eats senior time and earns no margin. We take the second kind. Findings from our readiness work route back to you as specified remediation tasks: we make the to-do list, you invoice for doing it.

What your clients experience

A readiness check that shows exactly what would fail; a fixed, all-in price for support through to certificate; plain-English answers written from their real setup (assessors spot boilerplate instantly — we don't use it); and a pass that arrives without their MSP relationship being disturbed. We are a certification-support specialist, not an IT provider: we don't sell managed services, we don't poach, and the certificate itself is always awarded by an IASME-accredited certification body — our job is making sure your client sails through it.

Why partner rather than DIY it

Three reasons MSPs hand this to us even when they could muddle through. Specialisation: we work with the current question set daily — including its awkward corners on BYOD, cloud scope and declarations — so nothing bounces for wording. Independence: when the same firm configures the controls and drafts the answers about them, sharp-eyed clients and their insurers sometimes prefer a second pair of hands on the attestation side; the split reads well. And economics: your margin lives in engineering, not form administration — every hour we absorb is an hour you re-sell.

How the arrangement works

Refer a client, or white-label us quietly behind your own service — both work. Introducer terms are agreed once, in writing, with any fee arrangement disclosed transparently; no volume targets, no tie-in. And if your own MSP doesn't yet hold Cyber Essentials — increasingly a supply-chain expectation for exactly your kind of business — we'll take you through it first, which is also the fastest way to evaluate us.