Home / Certifications / IASME Cyber Assurance Level 2
IASME-assured Certification Body · NCSC-assured Cyber Advisor

IASME Cyber Assurance Level 2

The independently audited level of IASME Cyber Assurance, often asked for by larger customers and regulated sectors.

Get certified from £2,250Book a free call
What's included

Everything you need to get certified

  • Independent audit against the IASME Cyber Assurance standard
  • Level 1 included if you don't already hold it (choose the bundle)
  • Certification from an IASME Certification Body

Who it's for

Organisations whose customers or regulators expect independently verified governance and security.

Good to know

  • Level 2 follows Level 1. If you don't hold Level 1 yet, choose the Level 1 + Level 2 bundle below.
About the certification

What is IASME Cyber Assurance Level 2?

IASME Cyber Assurance is a UK cyber security and data protection standard covering risk management, policies, staff training, backup, business continuity, incident response, supplier risk and legal requirements including UK GDPR.

Level 2 uses the same requirements as Level 1, but an independent assessor audits them: reviewing your documentation, interviewing key staff and observing how things work in practice, in person or sometimes remotely. That gives your customers a higher level of assurance that the controls are really in place.

Independent audit

Document review, staff interviews and observation by an IASME-assured assessor, so your answers are verified, not just declared.

Builds on Level 1

You need Level 1 first, and Level 2 must be achieved within six months of completing Level 1. You can order both together.

Valid for three years

The audit lasts three years, as long as you renew Cyber Essentials and Level 1 each year.

How it works

From Level 1 to audited certification

  1. Cyber Essentials and Level 1

    Hold a valid Cyber Essentials certificate and pass the Level 1 verified self-assessment.

  2. Plan the audit

    We agree the scope, the people involved and whether the audit is on site or remote.

  3. Audit

    The assessor reviews documents, interviews staff and observes your controls in practice.

  4. Certificate

    Once any findings are resolved, you're certified at Level 2, the audited level often asked for by larger customers and regulated sectors.

Questions

IASME Cyber Assurance Level 2 FAQs

Do we need Level 1 first?
Yes. Choose the Level 1 + Level 2 bundle if you don't hold it.
How is Level 2 assessed?
Through an independent audit against the IASME Cyber Assurance standard.
How long is Level 2 valid?
The audit is valid for three years. During that time you need to renew Cyber Essentials and the Level 1 self-assessment every year.
Is the audit done on site?
It can be in person or, in some cases, remote, for example by video call. We'll agree the approach with you.
How soon after Level 1 do we need the audit?
Level 2 must be achieved within six months of completing Level 1.
Is Level 2 an alternative to ISO 27001?
Some sectors accept audited IASME Cyber Assurance as an alternative to ISO 27001 for small companies. Check with the customer asking for it.
Let's Talk Security

Not sure which certification you need?

Talk to one of our team, who will be happy to talk through your requirements.

IASME Cyber Assurance Level 1ISO 27001 readinessBook a free call