CyberWhite

CyberWhite is a cybersecurity consultancy headquartered in Sunderland, North East England, with a regional office in Redcar. The company was incorporated in 2018 and describes itself as a provider of cyber security solutions and people-focused consultancy services. It says its team has supported clients throughout the UK, Europe, South East Asia, North America and South Africa.

Who they serve

CyberWhite says it supports organisations of any sector, size, or location. Its published client list includes NHS England, the Insolvency Service, the University of Manchester, the University of Sunderland and several local councils, alongside private businesses such as Hays Travel and PX Group. Its testimonials come from a housing association, a travel company, an NHS mental health service and an operator of essential services.

Standards and services

• ISO 27001:2022 support, following the Plan-Do-Check-Act cycle to help organisations set up and run an information security management system (ISMS)

• Cyber Essentials and Cyber Essentials Plus, the UK Government-backed scheme covering five basic technical controls

• SOC 2 and the Cyber Assessment Framework

• Governance, risk and compliance, including risk assessments, security policies, supplier reviews, incident management and audits

• Penetration testing, vulnerability scanning and digital forensics

• The CyberWhite Support Service, a managed security service with incident response, virtual CISO, dark web monitoring and security scanning options

How they work

CyberWhite describes a blended approach that combines people, process and technology. It tailors its services to each client's requirements and risk profile, mapped against the client's appetite for risk. For ISO 27001, its guidance stresses management commitment, a defined security policy, documented risk assessments and a security plan before controls are put in place. The company also offers a fully managed support network, with support available around the clock.

What sets them apart

CyberWhite holds ISO 27001 and ISO 9001 certification itself, as well as Cyber Essentials and Cyber Essentials Plus. Its work spans both the compliance side of security and the technical side, such as penetration testing and forensic investigation, so a client can use one supplier for certification readiness and hands-on testing. Past projects include third-party security audits of a client's key suppliers and the recovery of critical data following a fraud incident.