What accreditations does Incursion Cyber Security hold?
Incursion Cyber Security is an IASME-licensed certification body for Cyber Essentials, Cyber Essentials Plus and IASME Cyber Assurance, and a Cyber Scheme Accredited Company. We hold the same certifications we assess others against. Every accreditation below links to the public register where one exists, so you can verify it without taking our word for it.
Certifications we hold
| Certification | Issued by | What it covers | Verify |
|---|---|---|---|
| Cyber Essentials | IASME on behalf of the NCSC | The five technical controls that stop the most common internet-borne attacks, self-assessed and verified by a certification body. | Verify on the Blockmark registry |
| Cyber Essentials Plus | IASME on behalf of the NCSC | The same controls, independently tested by an assessor on our systems. | Verify on the Blockmark registry |
| IASME Cyber Assurance Level 1, including Quality Principles | IASME | Governance, risk management, data protection and business continuity beyond the Cyber Essentials baseline, verified self-assessment. | Verify on the Blockmark registry |
| IASME Cyber Assurance Level 2, including Quality Principles | IASME | The Level 1 controls, audited on site by an independent assessor. | Verify on the Blockmark registry |
| IASME Quality Principles | IASME | The quality management module assessed alongside Cyber Assurance. | Verify on the Blockmark registry |
What we do not hold
We do not hold ISO 27001 or ISO 9001. Our information security and quality management are certified under IASME Cyber Assurance Level 2 with the Quality Principles module, which covers the same ground at a scale appropriate to a specialist consultancy. If a tender requires ISO 27001 specifically, tell us and we will say plainly whether our certification meets the requirement.
Certification body status
We are licensed by IASME, the NCSC’s Cyber Essentials partner, to assess and certify other organisations. That licence is what allows us to issue certificates rather than only prepare you for someone else’s assessment.
| Scheme | Licensing body | Verify |
|---|---|---|
| Cyber Essentials Certification Body | IASME | Verify on the Blockmark registry · IASME directory (search Midsomer Norton) |
| Cyber Essentials Plus Certification Body | IASME | Verify on the Blockmark registry · IASME directory |
| IASME Cyber Assurance Certification Body | IASME | Verify on the Blockmark registry · IASME directory |
Professional titles held by our consultants
Our penetration testers hold professional titles issued by the UK Cyber Security Council in the Security Testing specialism: Chartered Cyber Security Professional (ChCSP) and Practitioner Cyber Security Professional (PraCSP). These are individual titles, awarded on assessed competence and renewed against a code of conduct. Our consultants also hold CREST and Cyber Scheme qualifications. Titles are listed per person on our team page.
Company accreditations, frameworks and memberships
| Accreditation | Body | What it means | Verify |
|---|---|---|---|
| The Cyber Scheme Accredited Company | The Cyber Scheme | Independent verification by The Cyber Scheme that our staff’s skills meet an established professional benchmark aligned with the UK Cyber Security Council’s Chartered Cyber Security Professional framework. | The Cyber Scheme Accredited Company programme. Accreditation reference TCS_2625. Public register in preparation by The Cyber Scheme; certificate available on request. |
| G-Cloud 15 supplier | Government Commercial Agency (formerly Crown Commercial Service) | Public sector bodies can buy our services through the Digital Marketplace without running a separate procurement. | G-Cloud 15 framework (RM1557.15), supplier 722325. View our Penetration Testing service on the Digital Marketplace. |
| JOSCAR registered supplier | Hellios, on behalf of the UK defence and aerospace sector | Pre-qualified supplier accreditation used by defence and aerospace primes and their supply chains. | JOSCAR supplier ID 10030864 |
| Armed Forces Covenant signatory and Employer Recognition Scheme Bronze award | Ministry of Defence | Covenant signed 23 March 2023. Bronze award holder since 2023 under the Defence Employer Recognition Scheme. | gov.uk covenant listing · ERS Bronze award holders list (gov.uk) |
| Federation of Small Businesses (FSB) member | Federation of Small Businesses | Member since September 2026. The FSB is the UK membership organisation for small businesses and the self-employed. | fsb.org.uk · membership confirmation available on request |
Company details
Incursion Cyber Security Ltd is registered in England and Wales, company number 14303576, incorporated 18 August 2022. Registered office: 1 Bushy Coombe, Midsomer Norton, BA3 2RW. Companies House record.
Ready to scope a test?
Book a call. Our sales team will set it up and handle the proposal; an active penetration tester agrees the scope with you. No obligation.


