---
title: "About Us: ISO Lead Auditors & Consultants | Cybercontrols"
description: Senior lead auditors who audit for certification bodies and implement ISO 27001, 42001, 27701 and 9001. Certified to ISO 27001 and ISO 42001 ourselves.
image: https://www.cybercontrols.io/hubfs/cc-newsletter-laptop-banner.jpg
---

[Cybercontrols.io](https://www.cybercontrols.io/)

[Compliance](https://www.cybercontrols.io/compliance)[Specialist Services](https://www.cybercontrols.io/specialist-services)[Training](https://www.cybercontrols.io/training-courses)[Insights](https://www.cybercontrols.io/blog)[About](https://www.cybercontrols.io/about)[Meet Tony](https://www.cybercontrols.io/tony-the-auditor)[Contact](https://www.cybercontrols.io/contact)

# About Cybercontrols ISO consultants who know the audit from the auditor's side.

Cybercontrols is a UK-based information security and compliance consultancy. We take organisations from "we should probably sort this out" to certified, audited and confident, and we hold ourselves to the same standards we implement.

[Book a call](https://meetings-eu1.hubspot.com/mvan-aswegen)[What we do](https://www.cybercontrols.io/compliance)

**ISO/IEC 27001:2022**Certified · SANCERT **ISO/IEC 42001:2023**Certified · SANCERT **Cyber Essentials**Certified **Government Commercial Agency**Approved Supplier · G-Cloud 15

Our story

## Practitioners first, consultants second.

Cybercontrols was founded on a simple frustration: too much compliance consulting is delivered by people who have read the standard but never run the system. Templates get sold, binders get filled, and the organisation is no more secure the day after certification than the day before.

We built the firm the other way round. Our consultants implement, operate and audit management systems week in, week out, across information security, privacy, AI governance, quality and resilience. When we advise on ISO 27001 or ISO 42001, it is because we hold those certifications ourselves and sit the same audits our clients do.

Today we support more than 805 organisations across the UK, the EU and beyond, from software start-ups seeking their first certification to regulated enterprises managing a dozen frameworks at once. We supply UK Government through G-Cloud 15, and we partner across Europe so our clients' obligations are covered wherever their data goes.

The name is the mission: put the right controls around what matters, and the business is free to move fast everywhere else.

### At a glance

Founded**United Kingdom**

Clients guided**805+**

Frameworks covered**15+**

Own certifications**ISO 27001 · ISO 42001 · Cyber Essentials**

Public sector**G-Cloud 15 supplier**

Registered**England & Wales, 14513536**

How we work

## Three promises on every engagement.

### Plain language

Standards are written in committee English; our advice isn't. You will always know what we're doing, why it matters and what it costs, in words your board can repeat.

### Built to hand over

We build systems your team can run without us. Dependence on a consultant is a finding, not a feature, and every engagement ends with playbooks and capable owners.

### Independent always

We sell no software, take no reseller commissions and carry no vendor allegiances. Recommendations are yours to trust because nobody pays us for them.

Proof, not promises

## Certified against the standards we implement.

**805+**Clients guided across the UK, EU and beyond

**100%**First-time certification success rate

**15+**Frameworks under one roof

**G-Cloud 15**UK Government approved supplier

The team

## Speak directly to the people who do the work.

No account managers in the middle. Book time straight into a consultant's diary.

MA

### Marius van Aswegen

Founder & Principal Consultant

[Book time →](https://meetings-eu1.hubspot.com/mvan-aswegen)

SA

### Sarah van Aswegen

Consulting Team

[Book time →](https://meetings-eu1.hubspot.com/sarahvanaswegen/meeting)

AS

### Arian Sheremeti

Consulting Team & EU Representative

[Book time →](https://meetings-eu1.hubspot.com/arian-sheremeti)

RP

### Rob Pragnell

Consulting Team

[Book time →](https://meetings-eu1.hubspot.com/rob-pragnell)

## Let's put the right controls around what matters.

A 30-minute call with a senior consultant, with no obligation and no sales deck.

[Book a call](https://meetings-eu1.hubspot.com/mvan-aswegen)[Contact us](https://www.cybercontrols.io/contact)

[Cybercontrols.io](https://www.cybercontrols.io/)

Secure your data, secure your success.

#### Compliance

[ISO 27001](https://www.cybercontrols.io/it-compliance/iso-27001-certification)[ISO 42001](https://www.cybercontrols.io/it-compliance/iso-42001-certification)[ISO 27701](https://www.cybercontrols.io/it-compliance/iso-27701)[ISO 9001](https://www.cybercontrols.io/it-compliance/iso-9001-certification)[NIS2](https://www.cybercontrols.io/it-compliance/nis2)[DORA](https://www.cybercontrols.io/it-compliance/dora-resilience)[SOC 2](https://www.cybercontrols.io/it-compliance/soc-2)[PCI DSS](https://www.cybercontrols.io/it-compliance/pci-dss-compliance)[NIST CSF](https://www.cybercontrols.io/it-compliance/nist-csf-programme)[Cyber Essentials](https://www.cybercontrols.io/it-compliance/cyber-essentials)[All frameworks](https://www.cybercontrols.io/compliance)

#### Services

[ISO 27001 Internal Audit](https://www.cybercontrols.io/it-compliance/iso-27001-internal-audit)[vCISO](https://www.cybercontrols.io/specialist-services/vciso)[Risk Management](https://www.cybercontrols.io/specialist-services/risk-management)[Cyber Strategy](https://www.cybercontrols.io/specialist-services/cyber-strategy)[Business Continuity](https://www.cybercontrols.io/specialist-services/business-continuity)[Security Awareness](https://www.cybercontrols.io/specialist-services/security-training)[Offensive Security](https://www.cybercontrols.io/offensive-security)[Training Courses](https://www.cybercontrols.io/training-courses)[All services](https://www.cybercontrols.io/specialist-services)

#### Company

[About](https://www.cybercontrols.io/about)[Insights](https://www.cybercontrols.io/blog)[G-Cloud 15](https://www.cybercontrols.io/g-cloud)[Pricing](https://www.cybercontrols.io/pricing)[Contact](https://www.cybercontrols.io/contact)[Privacy Notice](https://www.cybercontrols.io/privacy-notice)[Cookie Policy](https://www.cybercontrols.io/cookies)[Accessibility](https://www.cybercontrols.io/accessibility-statement)[Modern Slavery](https://www.cybercontrols.io/modern-slavery-statement)

© 2026 Cyber Controls.io Ltd, trading as Cybercontrols. All rights reserved.Registered in England & Wales, company number 14513536. Registered office: 3 Nursery Gardens, Stannington Station Road, Morpeth, NE61 6FP, United Kingdom.

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/#organization",
  "@type" : [ "Organization", "ProfessionalService" ],
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "GB",
    "addressLocality" : "Morpeth",
    "addressRegion" : "Northumberland",
    "postalCode" : "NE61 6FP",
    "streetAddress" : "3 Nursery Gardens, Stannington Station Road"
  },
  "alternateName" : [ "Cybercontrols.io", "Cyber Controls" ],
  "areaServed" : [ {
    "@type" : "Country",
    "name" : "United Kingdom"
  }, {
    "@type" : "Place",
    "name" : "European Union"
  } ],
  "contactPoint" : {
    "@type" : "ContactPoint",
    "areaServed" : "GB",
    "availableLanguage" : "English",
    "contactType" : "sales",
    "url" : "https://www.cybercontrols.io/contact"
  },
  "description" : "UK information security, privacy and AI governance consultancy that implements and audits ISO 27001, ISO 42001, ISO 27701 and ISO 9001, led by senior lead auditors. Certified to ISO 27001 and ISO 42001 by SANCERT and a G-Cloud 15 supplier.",
  "founder" : {
    "@type" : "Person",
    "jobTitle" : "CEO, Founder and GRC Architect",
    "name" : "Marius van Aswegen",
    "sameAs" : [ "https://x.com/MariusTheISOGuy" ]
  },
  "foundingDate" : "2022-11-29",
  "hasCredential" : [ {
    "@type" : "EducationalOccupationalCredential",
    "credentialCategory" : "certification",
    "name" : "ISO/IEC 27001:2022 certification",
    "recognizedBy" : {
      "@type" : "Organization",
      "name" : "SANCERT"
    }
  }, {
    "@type" : "EducationalOccupationalCredential",
    "credentialCategory" : "certification",
    "name" : "ISO/IEC 42001:2023 certification",
    "recognizedBy" : {
      "@type" : "Organization",
      "name" : "SANCERT"
    }
  }, {
    "@type" : "EducationalOccupationalCredential",
    "credentialCategory" : "certification",
    "name" : "Cyber Essentials"
  } ],
  "identifier" : {
    "@type" : "PropertyValue",
    "propertyID" : "Companies House",
    "value" : "14513536"
  },
  "image" : "https://144611087.fs1.hubspotusercontent-eu1.net/hubfs/144611087/cc-newsletter-laptop-banner.jpg",
  "knowsAbout" : [ "ISO/IEC 27001:2022", "ISO/IEC 42001:2023", "ISO/IEC 27701:2025", "ISO 9001:2026", "NIS2", "DORA", "SOC 2", "PCI DSS v4", "NIST CSF 2.0", "EU AI Act", "Cyber Essentials", "ISO 27001 internal audit", "Integrated management systems" ],
  "legalName" : "Cyber Controls.io Ltd",
  "logo" : {
    "@type" : "ImageObject",
    "height" : 178,
    "url" : "https://144611087.fs1.hubspotusercontent-eu1.net/hubfs/144611087/cybercontrols-logo-white-bg-800.jpg",
    "width" : 800
  },
  "memberOf" : {
    "@type" : "ProgramMembership",
    "programName" : "UK Government G-Cloud 15 framework",
    "url" : "https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/550040053926415"
  },
  "name" : "Cybercontrols",
  "sameAs" : [ "https://www.linkedin.com/company/cybercontrols-io", "https://www.g2.com/products/cybercontrols-io/reviews", "https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/550040053926415", "https://find-and-update.company-information.service.gov.uk/company/14513536" ],
  "slogan" : "Secure your data, secure your success.",
  "url" : "https://www.cybercontrols.io/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/#website",
  "@type" : "WebSite",
  "inLanguage" : "en-GB",
  "name" : "Cybercontrols",
  "publisher" : {
    "@id" : "https://www.cybercontrols.io/#organization"
  },
  "url" : "https://www.cybercontrols.io/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/about#breadcrumb",
  "@type" : "BreadcrumbList",
  "itemListElement" : [ {
    "@type" : "ListItem",
    "item" : "https://www.cybercontrols.io/",
    "name" : "Home",
    "position" : 1
  }, {
    "@type" : "ListItem",
    "item" : "https://www.cybercontrols.io/about",
    "name" : "About Us: ISO Lead Auditors & Consultants",
    "position" : 2
  } ]
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/about#webpage",
  "@type" : "AboutPage",
  "about" : {
    "@id" : "https://www.cybercontrols.io/#organization"
  },
  "breadcrumb" : {
    "@id" : "https://www.cybercontrols.io/about#breadcrumb"
  },
  "description" : "Senior lead auditors who audit for certification bodies and implement ISO 27001, 42001, 27701 and 9001. Certified to ISO 27001 and ISO 42001 ourselves.",
  "inLanguage" : "en-GB",
  "isPartOf" : {
    "@id" : "https://www.cybercontrols.io/#website"
  },
  "name" : "About Us: ISO Lead Auditors & Consultants | Cybercontrols",
  "url" : "https://www.cybercontrols.io/about"
}
```