Guidance

Cyber security consultancy support, plus assessment and certification

Published 29 September 2025

1. Scope of call

The threat to space is real and coming increasingly closer to the UK space industry as attempted breaches have demonstrated. 

Demonstrating a commitment to security is critical to the ongoing success of any business. 

Ensuring secure, robust and recoverable services and services can provide a competitive advantage in the marketplace and avoids unnecessary costly retrofitting.  

Successful applicants can receive up to 3 days consultation from a cyber security professional funded by the UK Space Agency. This can be virtual or at a place of business (UK) depending on requirements.

Applicants can also receive a Cyber Essentials and/or Cyber Essentials audit, assessment and certification.  Achieving any recognised standard of cyber security will reassure customers that you are working to secure your IT against cyber attack and make your company more attractive to new business in a growing competitive international marketplace.

Additionally, UK-domiciled organisations with a turnover under £20m achieving Cyber Essentials covering their whole organisation are entitled to free Cyber Liability Insurance (subject to terms).

For more information see https://iasme.co.uk/cyber-essentials/cyber-liability-insurance/

For more information about the Cyber essentials scheme or to test your readiness see https://www.ncsc.gov.uk/cyberessentials/overview

Additionally, there will be virtual ‘Cyber Essentials: Are you ready?’ sessions where an assessor will discuss the process and answer questions.

The dates and times for these sessions will be advertised on  https://www.resilience.gov.uk/ Please register for a free account if you don’t already have one.

2. What you will receive from a cyber security consultant

Successful applicants can receive up to 3 days with a cyber security professional funded by the UK Space Agency. This can be virtual or at a place of business (UK) depending on requirements.

Work undertaken can include:  

  • Interpretation of designs to understand how IT infrastructure is currently architectured in order to identify any security flaws.   
  • Advice regarding security assessments & testing, asset security and software development security (does not include hands on security testing such as penetration tests).  
  • Company or System Security Governance reviews
  • Review and recommendations on Company or System Security Policies and Processes
  • System security requirements and development support
  • High level risk assessments and risk assessment review, including recommendations for mitigating actions
  • A written report detailing findings, vulnerabilities and recommendations.  
  • In person or virtual meetings as required, to present findings, assist with remediation and risk management planning.  

3. What you will receive through the Cyber Essentials programme

  • You can receive up to 3 days of time from an experienced cyber security consultant as above.
  • A report of recommendations stating how to upgrade any areas of your systems that doesn’t meet the necessary Cyber Essentials accreditation standards.
  • Once a suitable and reasonable agreed period to remedy the improvements has passed, the final assessment against the relevant Cyber Essentials framework will then be undertaken.

The above consultancy, audits and assessments are fully funded by the UK Space Agency.

(Corrective actions/recommendations are at own cost and not covered by the funding in this programme)

4. Application criteria

Applying organisations must meet the following criteria:

  • Be an SME involved in space sector activity (less than 250 employee headcount)
  • Have a manufacturing or operational presence in the UK (includes NI). Applications from micro/start-up businesses are particularly welcomed.

The Application form is at https://collaborate.resilience.gov.uk/home/329682/NEWS. Please register for a free account if you don’t already have one. (Ensure you register with an individual named (not shared/team) business email address. When asked to ‘Select Group’ it is UK Space Agency RD Lite).

Applications should be submitted to resilience@ukspaceagency.gov.uk.

If you have any questions please contact resilience@ukspaceagency.gov.uk.