Buying or running digital health
For NHS and care organisations buying or deploying digital health. Independent assurance on whether a supplier, system, or AI deployment is safe to proceed with.
Paid Scoping & Risk Diagnostic
A short, fixed-fee diagnostic that scopes your position and points to the right next step.
Fixed scope, regardless of organisation size. Fee credited in full against any engagement booked within 30 days.
DSPT Support & Completion
A defensible DSPT submission through gap assessment, CAF-aware advisory and quality assurance.
Standard: single site, simple evidence base. Complex: multiple systems or sites.
ISO/IEC 27001 Implementation Advisory and QA
A certification-ready ISMS on an advisory-and-QA basis, owned and populated by your team under our direction.
Standard: SME with a single ISMS scope. Complex: multiple scopes or a larger organisation.
NHS Data Security & Risk Assurance Review
A board-level, independent opinion on whether an organisation is genuinely safe to access NHS data.
Set by scope, evidence volume and organisational complexity. Fee confirmed in the quotation after written scoping.
ISO/IEC 27001 Control Reality Assessment
An independent check of whether documented ISO 27001 controls are meaningful in practice.
Set by the number of controls in scope and the sampling depth. Fee confirmed in the quotation after written scoping.
Pre-Procurement & Pre-Data Access Risk Assessment
A fast, independent risk opinion before you procure a system or grant a supplier access to data.
Set by the sensitivity of the data and the complexity of the supplier or system. Fee confirmed in the quotation after written scoping.
Clinical Safety Officer (DCB0129 / DCB0160) as a Service
Your named Clinical Safety Officer under DCB0129/0160, held by a registered clinician.
Set by the number of products and the ongoing oversight required.
Clinical Risk & DCB0129 Supplier Assurance
An independent, clinically-informed check of a supplier clinical risk management file before you deploy.
Set by product complexity and clinical risk profile. Fee confirmed in the quotation after written scoping.
AI Management System Implementation (ISO/IEC 42001)
An ISO/IEC 42001 AI management system, integrated with your ISO 27001 controls.
Set by organisation size and the number and complexity of AI systems in scope.
AI & Emerging Technology Governance Assessment
An independent assessment of whether your AI deployment risk is acceptable and defensible.
Set by the number of AI systems, their risk tier and regulatory exposure. Fee confirmed in the quotation after written scoping.
All prices exclude VAT. Work outside the stated scope is quoted separately.
Not sure which fits? Send us a short enquiry, or start with the Paid Scoping & Risk Diagnostic.