Question 1

What are IT compliance services?

Accepted Answer

IT compliance services help businesses meet their regulatory and standards obligations — including Cyber Essentials (required for UK government contracts), ISO 27001 (international information security standard), GDPR technical requirements, and sector-specific regulations (FCA, CQC, SRA, etc.). Coreitech provides technical IT compliance services: implementing the security controls, writing documentation, training staff, and supporting certification audits. We work alongside your legal and compliance team on the governance and policy side.

Question 2

What is a data protection consultant?

Accepted Answer

A data protection consultant advises on and implements the technical controls required by GDPR and UK GDPR — access controls and least privilege, encryption of personal data at rest and in transit, data retention and deletion procedures, breach detection and notification, data processor agreements and assessments, and privacy by design in IT systems. Coreitech's data protection consultancy focuses on the technical IT controls — we work alongside your DPO, legal team, or external data protection solicitor for the governance and policy requirements.

Question 3

What is a GDPR security assessment?

Accepted Answer

A GDPR security assessment (sometimes called a DPIA technical review or GDPR IT audit) reviews the technical security controls protecting personal data in your organisation — covering: access controls and authentication, encryption of personal data, network security and segmentation, data backup and recovery, third-party data processor controls, breach detection capabilities, and staff access monitoring. The output is a gap analysis against GDPR Article 32 requirements with a prioritised remediation roadmap.

Question 4

Do I need Cyber Essentials and ISO 27001?

Accepted Answer

Most UK SMEs should prioritise Cyber Essentials first — it's achievable in weeks, costs hundreds to low thousands of pounds, and is required for UK government and public sector contracts. ISO 27001 provides a more comprehensive international standard and is increasingly required for enterprise clients, financial services suppliers, and international contracts. Many businesses achieve Cyber Essentials first, then progress to ISO 27001 over 6–12 months. Coreitech provides both.

Question 5

How much does IT compliance cost?

Accepted Answer

IT compliance costs depend on the standard and scope: Cyber Essentials — from £1,200 all-in (Coreitech managed, 100% first-time pass guarantee). Cyber Essentials Plus — from £2,500. ISO 27001 implementation — project-based pricing based on headcount and current security maturity. GDPR IT audit — from £1,500. Ongoing compliance management — from £5/user/month. All projects are fixed-price with clear scope.

IT COMPLIANCE
SERVICES

IT compliance services

Cyber Essentials & CE Plus

ISO 27001 Implementation

GDPR IT Compliance

Cyber Security Risk Assessment

Data Protection Consultancy

Ongoing Compliance Management

IT compliance — FAQ

Get compliant with confidence

IT COMPLIANCESERVICES