---
title: ISO, NIS2, DORA, SOC 2 Compliance UK | Cybercontrols
description: "One consultancy for ISO 27001, 42001, 27701, 9001, NIS2, DORA, SOC 2, PCI DSS and NIST CSF: integrated programmes led by senior lead auditors in the UK."
image: https://www.cybercontrols.io/hubfs/cc-newsletter-laptop-banner.jpg
---

[Cybercontrols.io](https://www.cybercontrols.io/)

[Compliance](https://www.cybercontrols.io/compliance)[Specialist Services](https://www.cybercontrols.io/specialist-services)[Training](https://www.cybercontrols.io/training-courses)[Insights](https://www.cybercontrols.io/blog)[About](https://www.cybercontrols.io/about)[Meet Tony](https://www.cybercontrols.io/tony-the-auditor)[Contact](https://www.cybercontrols.io/contact)

# Compliance · Certification & Frameworks Every framework you need. One firm that audits them.

Implementation, internal audit and maintenance across the standards and regulations that matter to UK and European business, delivered by senior consultants who assess these very frameworks on behalf of certification bodies.

[Book a 30-minute scoping call](https://meetings-eu1.hubspot.com/mvan-aswegen)[See specialist services](https://www.cybercontrols.io/specialist-services)

We hold ourselves to the standards we audit: Cybercontrols is certified to

**ISO/IEC 27001:2022**Certified · SANCERT **ISO/IEC 42001:2023**Certified · SANCERT **Cyber Essentials**Certified **Government Commercial Agency**Approved Supplier · G-Cloud 15

Standards we deliver

## Pick your framework. We have sat on both sides of its audit table.

The triangle of control, spanning information security, privacy and AI governance, sits at the centre of our practice, surrounded by the regulations and standards your customers and regulators ask about.

### [Information Security ISO/IEC 27001 The flagship ISMS certificate: implementation, internal audit and maintenance that survive scrutiny. Explore ISO 27001 →](https://www.cybercontrols.io/it-compliance/iso-27001-certification)

### [Privacy Management ISO/IEC 27701 Turn GDPR accountability into something you can certify, under the new 2025 standalone edition. Explore ISO 27701 →](https://www.cybercontrols.io/it-compliance/iso-27701)

### [AI Management ISO/IEC 42001 Responsible AI, certified, by a consultancy that holds the certificate itself. Explore ISO 42001 →](https://www.cybercontrols.io/it-compliance/iso-42001-certification)

### [Quality Management ISO 9001 The certificate customers ask for first, with a managed path to the 2026 edition. Explore ISO 9001 →](https://www.cybercontrols.io/it-compliance/iso-9001-certification)

### [Network & Information Security EU NIS2 Scope, gap assessment and implementation for essential and important entities and their suppliers. Explore NIS2 →](https://www.cybercontrols.io/it-compliance/nis2)

### [Digital Operational Resilience EU DORA All five pillars, one coherent programme, for financial entities and their ICT providers. Explore DORA →](https://www.cybercontrols.io/it-compliance/dora-resilience)

### [Payment Card Security PCI DSS V4 Scoping that shrinks the burden, controls that pass, evidence that holds. Explore PCI DSS →](https://www.cybercontrols.io/it-compliance/pci-dss-compliance)

### [Cybersecurity Framework NIST CSF 2.0 A working security programme with honest profiles and tiers, not a poster on the wall. Explore NIST CSF →](https://www.cybercontrols.io/it-compliance/nist-csf-programme)

### [Trust Services SOC 2 Type I and Type II readiness for SaaS companies selling into the US market. Explore SOC 2 →](https://www.cybercontrols.io/it-compliance/soc-2)

The triangle of control

## Three certificates. One integrated system.

Information security, privacy and AI governance are three certificates, but they need not be three programmes. We build them as one integrated management system, with shared risk management, shared internal audit and shared management review, so each additional certificate costs a fraction of the first. We run our own business on exactly this triangle, and hold the certificates to show for it.

**ISO 27001**

The security spine: the management system your other certificates stand on.

**ISO 27701**

Privacy bolted to the same spine, GDPR accountability made certifiable.

**ISO 42001**

AI governance on the same system, ready for the EU AI Act era.

**One system**

Shared audits, shared reviews, one evidence library, far less overhead.

Free self-assessment

## How ready are you? Find out in five minutes.

Our GRC assessment asks the questions an auditor would ask on day one: how your risks are managed, where your policies live, who owns what, and how you would evidence it all under scrutiny.

Complete it and a senior consultant reviews your answers personally, then sends you a short, honest readout: where you stand, what a certification path would look like, and which quick wins cost nothing. No obligation follows, and no automated scorecard either. A person reads it.

### GRC readiness assessment

A few minutes now saves a discovery workshop later. Handled under our [privacy notice](https://www.cybercontrols.io/privacy-notice).

## Not sure which framework you need?

That is precisely what a scoping call is for. Thirty minutes with a senior lead auditor, and an honest answer, even if it is "not yet".

[Book your scoping call](https://meetings-eu1.hubspot.com/mvan-aswegen)[Or send us a message](https://www.cybercontrols.io/contact)

[Cybercontrols.io](https://www.cybercontrols.io/)

Secure your data, secure your success.

#### Compliance

[ISO 27001](https://www.cybercontrols.io/it-compliance/iso-27001-certification)[ISO 42001](https://www.cybercontrols.io/it-compliance/iso-42001-certification)[ISO 27701](https://www.cybercontrols.io/it-compliance/iso-27701)[ISO 9001](https://www.cybercontrols.io/it-compliance/iso-9001-certification)[NIS2](https://www.cybercontrols.io/it-compliance/nis2)[DORA](https://www.cybercontrols.io/it-compliance/dora-resilience)[SOC 2](https://www.cybercontrols.io/it-compliance/soc-2)[PCI DSS](https://www.cybercontrols.io/it-compliance/pci-dss-compliance)[NIST CSF](https://www.cybercontrols.io/it-compliance/nist-csf-programme)[Cyber Essentials](https://www.cybercontrols.io/it-compliance/cyber-essentials)[All frameworks](https://www.cybercontrols.io/compliance)

#### Services

[ISO 27001 Internal Audit](https://www.cybercontrols.io/it-compliance/iso-27001-internal-audit)[vCISO](https://www.cybercontrols.io/specialist-services/vciso)[Risk Management](https://www.cybercontrols.io/specialist-services/risk-management)[Cyber Strategy](https://www.cybercontrols.io/specialist-services/cyber-strategy)[Business Continuity](https://www.cybercontrols.io/specialist-services/business-continuity)[Security Awareness](https://www.cybercontrols.io/specialist-services/security-training)[Offensive Security](https://www.cybercontrols.io/offensive-security)[Training Courses](https://www.cybercontrols.io/training-courses)[All services](https://www.cybercontrols.io/specialist-services)

#### Company

[About](https://www.cybercontrols.io/about)[Insights](https://www.cybercontrols.io/blog)[G-Cloud 15](https://www.cybercontrols.io/g-cloud)[Pricing](https://www.cybercontrols.io/pricing)[Contact](https://www.cybercontrols.io/contact)[Privacy Notice](https://www.cybercontrols.io/privacy-notice)[Cookie Policy](https://www.cybercontrols.io/cookies)[Accessibility](https://www.cybercontrols.io/accessibility-statement)[Modern Slavery](https://www.cybercontrols.io/modern-slavery-statement)

© 2026 Cyber Controls.io Ltd, trading as Cybercontrols. All rights reserved.Registered in England & Wales, company number 14513536. Registered office: 3 Nursery Gardens, Stannington Station Road, Morpeth, NE61 6FP, United Kingdom.

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/#organization",
  "@type" : [ "Organization", "ProfessionalService" ],
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "GB",
    "addressLocality" : "Morpeth",
    "addressRegion" : "Northumberland",
    "postalCode" : "NE61 6FP",
    "streetAddress" : "3 Nursery Gardens, Stannington Station Road"
  },
  "alternateName" : [ "Cybercontrols.io", "Cyber Controls" ],
  "areaServed" : [ {
    "@type" : "Country",
    "name" : "United Kingdom"
  }, {
    "@type" : "Place",
    "name" : "European Union"
  } ],
  "contactPoint" : {
    "@type" : "ContactPoint",
    "areaServed" : "GB",
    "availableLanguage" : "English",
    "contactType" : "sales",
    "url" : "https://www.cybercontrols.io/contact"
  },
  "description" : "UK information security, privacy and AI governance consultancy that implements and audits ISO 27001, ISO 42001, ISO 27701 and ISO 9001, led by senior lead auditors. Certified to ISO 27001 and ISO 42001 by SANCERT and a G-Cloud 15 supplier.",
  "founder" : {
    "@type" : "Person",
    "jobTitle" : "CEO, Founder and GRC Architect",
    "name" : "Marius van Aswegen",
    "sameAs" : [ "https://x.com/MariusTheISOGuy" ]
  },
  "foundingDate" : "2022-11-29",
  "hasCredential" : [ {
    "@type" : "EducationalOccupationalCredential",
    "credentialCategory" : "certification",
    "name" : "ISO/IEC 27001:2022 certification",
    "recognizedBy" : {
      "@type" : "Organization",
      "name" : "SANCERT"
    }
  }, {
    "@type" : "EducationalOccupationalCredential",
    "credentialCategory" : "certification",
    "name" : "ISO/IEC 42001:2023 certification",
    "recognizedBy" : {
      "@type" : "Organization",
      "name" : "SANCERT"
    }
  }, {
    "@type" : "EducationalOccupationalCredential",
    "credentialCategory" : "certification",
    "name" : "Cyber Essentials"
  } ],
  "identifier" : {
    "@type" : "PropertyValue",
    "propertyID" : "Companies House",
    "value" : "14513536"
  },
  "image" : "https://144611087.fs1.hubspotusercontent-eu1.net/hubfs/144611087/cc-newsletter-laptop-banner.jpg",
  "knowsAbout" : [ "ISO/IEC 27001:2022", "ISO/IEC 42001:2023", "ISO/IEC 27701:2025", "ISO 9001:2026", "NIS2", "DORA", "SOC 2", "PCI DSS v4", "NIST CSF 2.0", "EU AI Act", "Cyber Essentials", "ISO 27001 internal audit", "Integrated management systems" ],
  "legalName" : "Cyber Controls.io Ltd",
  "logo" : {
    "@type" : "ImageObject",
    "height" : 178,
    "url" : "https://144611087.fs1.hubspotusercontent-eu1.net/hubfs/144611087/cybercontrols-logo-white-bg-800.jpg",
    "width" : 800
  },
  "memberOf" : {
    "@type" : "ProgramMembership",
    "programName" : "UK Government G-Cloud 15 framework",
    "url" : "https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/550040053926415"
  },
  "name" : "Cybercontrols",
  "sameAs" : [ "https://www.linkedin.com/company/cybercontrols-io", "https://www.g2.com/products/cybercontrols-io/reviews", "https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/550040053926415", "https://find-and-update.company-information.service.gov.uk/company/14513536" ],
  "slogan" : "Secure your data, secure your success.",
  "url" : "https://www.cybercontrols.io/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/#website",
  "@type" : "WebSite",
  "inLanguage" : "en-GB",
  "name" : "Cybercontrols",
  "publisher" : {
    "@id" : "https://www.cybercontrols.io/#organization"
  },
  "url" : "https://www.cybercontrols.io/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/compliance#breadcrumb",
  "@type" : "BreadcrumbList",
  "itemListElement" : [ {
    "@type" : "ListItem",
    "item" : "https://www.cybercontrols.io/",
    "name" : "Home",
    "position" : 1
  }, {
    "@type" : "ListItem",
    "item" : "https://www.cybercontrols.io/compliance",
    "name" : "ISO, NIS2, DORA, SOC 2 Compliance UK",
    "position" : 2
  } ]
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.cybercontrols.io/compliance#webpage",
  "@type" : "CollectionPage",
  "about" : {
    "@id" : "https://www.cybercontrols.io/#organization"
  },
  "breadcrumb" : {
    "@id" : "https://www.cybercontrols.io/compliance#breadcrumb"
  },
  "description" : "One consultancy for ISO 27001, 42001, 27701, 9001, NIS2, DORA, SOC 2, PCI DSS and NIST CSF: integrated programmes led by senior lead auditors in the UK.",
  "inLanguage" : "en-GB",
  "isPartOf" : {
    "@id" : "https://www.cybercontrols.io/#website"
  },
  "name" : "ISO, NIS2, DORA, SOC 2 Compliance UK | Cybercontrols",
  "url" : "https://www.cybercontrols.io/compliance"
}
```