Compliance & frameworks
Compliance that’s built into your IT, not bolted on
Clients send 80-question security questionnaires. Insurers ask about MFA and backups. Regulators expect “appropriate technical measures”. Most small businesses have the intent but not the evidence. We put the right controls in place and help you prove it, without drowning you in paperwork.
- Microsoft Partner
- Cyber Essentials certified
- 5.0 on Google
Frameworks we support
The standards Kent businesses get asked about
We handle the technical side of each: the IT controls, configuration and evidence. Where a framework needs legal or policy work, we work alongside your adviser.
-
Cyber Essentials & Plus
The UK baseline, and usually the best first step.
Cyber Essentials -
UK GDPR
Encryption, access control, backups, retention and breach detection: the “appropriate technical measures” the law expects.
-
NHS DSPT
The Data Security and Protection Toolkit for care providers, practices and NHS suppliers, with the IT evidence it asks for.
-
ISO 27001 readiness
Technical controls, asset registers and access reviews that make certification achievable.
-
PCI DSS
Card payment systems segmented and secured, which reduces the scope of your obligations.
-
Client & insurer questionnaires
Accurate, consistent answers backed by real controls, not optimistic box-ticking.
How we work
Evidence, not just good intentions
Compliance usually fails at the evidence stage. The controls might exist, but nobody can show when updates were applied, who has admin access or when backups were last tested.
Because we manage your IT day to day, that evidence is produced as we go: device reports, access reviews, backup test logs and security reports, ready when an auditor, client or insurer asks.
- Gap analysis against the framework you need
- Technical controls implemented and documented
- Policies drafted for the IT areas, ready for your review
- Evidence pack kept current for audits and renewals
Compliance roadmap
Every item costed, so budgets are planned, not surprises
FAQ
Compliance questions
Can’t see your question? Call 01843 482 279 or email hello@squareoneit.co.uk. You’ll get a straight answer from an engineer.
Can you make us GDPR compliant?
GDPR compliance covers legal, process and technical areas. We handle the technical measures, including encryption, access control, backups, logging and incident response, and produce the evidence. Your data protection lead or solicitor covers policies, lawful bases and records of processing.
Do you help care providers with the DSPT?
Yes. Many DSPT assertions are about IT: supported systems, MFA, backups, access control and staff training. We put those in place and help you evidence them.
Can you fill in our client’s security questionnaire?
We’ll help you answer it accurately and, where a gap exists, tell you how to close it. We won’t overstate your controls. An inaccurate questionnaire is a risk in itself.
Where should a small business start?
With Cyber Essentials. It covers the core technical controls that almost every other framework expects, and it gives you a recognised certificate to show for it.
Got a questionnaire or audit coming up?
Send it over. We’ll tell you what you can already evidence, what’s missing, and how long it would take to close the gaps.
- Call the team01843 482 279
- Emailhello@squareoneit.co.uk
- VisitKent Innovation Centre, Thanet Reach Business Park, Broadstairs CT10 2QQ
- Helpdesk hoursMonday to Friday, 9am – 5pm