Understand and overcome your cyber challenges

Independent and impartial review

CORVID will assess your current designs and review your governance and cyber security framework. We will highlight any shortfalls, what is needed or simply not necessary; making sure you focus on what’s important.

Comprehensive cyber knowledge

CORVID’s highly skilled team has a plethora of specialisms to solve any cyber concern. From developing a cyber strategy, identifying and managing your security risk, to designing your system architecture, we have the right expert for your needs. 

Assist with compliance

We are well-versed in this niche problem space. We can help you prepare submissions to meet key compliance, accreditation and certification standards, including List X, MOD accreditation, Cyber Essentials, GDPR and ISO 27001.

Fully qualified expertise

We guarantee professionalism and results. Our team includes NCSC-certified consultants, GDPR practitioners and analysts qualified to doctorate-level. We can supplement your own capability and transfer our knowledge, enabling you to fulfil your requirements.

Demonstrate adeptness and efficiency

We solve problems and complete what needs doing in the most proficient way. Integrity is part of our ethos and we will only deliver what is required to meet your objectives – one of many reasons why CORVID is highly recommended.

Improved short and long-term goals

Our partnership can continue as long as you require. We set a clear path to achieve your goals over the short to long-term, and maintain our relationship so we’re there when you need us. What’s more, you decide our level of involvement – from providing guidance and training, to defining methodology, strategic direction and transferring skills.

Risk assessment

Risk assessment is key for any organisation in understanding the impact cyber can have on its business activities. It’s a staged and iterative process. Organisations must identify and value their information assets, quantify the threat to them and manage vulnerabilities in their information systems. This information needs to be formulated into focused risk statements, which are prioritised and mitigated by applying appropriate controls. There is no one correct method for assessing risk, and an organisation should choose the most appropriate method that fits with the way they do business. Following prioritisation, an assessment is then made on the effectiveness of the controls against the level of risk, and the risk owner judges if any further treatment is necessary.

The threat landscape is ever-changing, therefore an organisation’s risk assessment must be reviewed regularly and revised if necessary.

GDPR compliance

As of May 2018, the EU General Data Protection Regulation (GDPR) has become law. Our consultants will check your due diligence, and identify any regulatory gaps that may leave your business exposed to substantial liability. Any guidance will complement your existing business drivers and integrate into your business objectives; giving you the confidence to process and protect personal information lawfully.

ISO 27001

ISO 27001:2013 is the recognised international standard for information security management, and provides a common framework for developing security policy and identifying mitigating controls. The certification standard provides a holistic approach to managing information risk; ensuring continuous improvement of the controls that maintain the confidentiality, integrity and availability of data. Our consultants can help you meet the requirements and assist you in preparing your submission.

Cyber Essentials

Cyber Essentials is a government-backed, industry-sponsored scheme to help businesses protect themselves against common cyber attacks. It provides a clear statement of the basic controls all organisations should implement to mitigate risks from the most frequent internet-based threats. Once a sound foundation of basic hygiene measures are in place, it can be built on as an organisation better understands its exposure to cyber risk. Our experts can help you achieve this standard.

List X

List X Contractor Status is the term used by UK Government to describe a business that has been approved to hold and process information at the Government Security Classification (GSC) of SECRET and above. A combination of appropriate and robust physical, procedural and personnel security measures is required to achieve List X Contractor Status. Our specialists have extensive experience in this area, which allows them to help you gain List X facilities approval.