Cyber Essentials and Plus
Support clients through Cyber Essentials and Cyber Essentials Plus, with certification assessment delivered by Fig Compliance Ltd.
Explore Cyber EssentialsFor resellers, MSPs and MSSPsExpand your offering.
Expand your offering.
Retain your client relationships.
Bring compliance certification, cybersecurity software and specialist security services into your portfolio. Work with Fig to deliver a broader client offering, with commercial terms and responsibilities agreed around your business.
Your relationship. A broader capability.
- Retain your client relationships under a reseller or white-label arrangement
- Combine certification, software and specialist security services
- Agree branding, delivery and client communications in advance
- Develop your offering around your clients’ requirements
Referral, resale and white-label structures available · see published pricing
The partner portfolio
From certification to ongoing client oversight.
Offer an individual service or combine the platform, certification and specialist assessments around each client’s requirements. Delivery scope and responsibilities are confirmed for every engagement.
Defence Cyber Certification
Offer Level 0 and Level 1 certification engagements. Confirm the applicable requirements, prerequisites and scope for each client.
Explore DCCSecurity testing and reviews
Vulnerability scanning, penetration testing, device and cloud security reviews, public exposure checks and source code reviews, scoped to each client’s requirements.
Explore all six servicesThe Fig platform
Bring client oversight, compliance and cybersecurity monitoring, policies, risks, remediation tasks and reporting together in one platform.
Explore the platformPartnership models
Structure the partnership around your business.
Choose the level of client involvement and branding you need. We will confirm the appropriate commercial and delivery arrangements together.
Introduce clients
Referral
Connect clients with Fig for a defined certification, software or security requirement. Agree referral arrangements and the client handover before making an introduction.
Designed for
Discuss referral Professional advisers, consultancies and introducers.
Extend your portfolio
Reseller
Add Fig services to your portfolio while managing the commercial relationship with your client. Partner pricing, invoicing and delivery responsibilities are agreed in your terms.
Designed for
Discuss reseller IT resellers, value-added resellers and channel businesses.
Deliver under your brand
White-label
Combine your client management with Fig’s platform and specialist delivery to offer a broader security and compliance service under your own brand. Branding and communications are agreed in advance.
Designed for
Discuss white-label MSPs and MSSPs developing a branded managed service.
Pricing, referral arrangements and delivery responsibilities are confirmed in your partner terms before the first client engagement.
Discuss partner termsHow it works
A clear process from enquiry to delivery.
Discuss your client requirements
Tell us about your business, the clients you support and the services you want to offer. We identify the appropriate partner model and initial scope.
Agree the operating model
Confirm pricing, branding, contracts, client communications and support responsibilities. Establish how your team and Fig will coordinate delivery.
Deliver the first engagement
Agree the client scope and authorisations. Your team manages the relationship under the chosen model; Fig delivers the contracted assessment, software or specialist service.
Plan ongoing client support
Review findings, assign remediation responsibilities and discuss renewals or additional services where relevant to the client.
Partner-led service. Independent assessment.
We work with MSPs to certify their clients. Your team can complete the Cyber Essentials self-assessment on the client’s behalf, provided the organisation reviews and authorises the submission and its board-level representative or equivalent provides the required sign-off in the Cyber Essentials portal. Fig Compliance Ltd carries out the certification assessment; the client organisation holds the certificate.
White-labelling does not remove required certification-body details, scheme marks or client declarations.
Verify our IASME licenceAdditional client requirements
Support the next stage of your client’s compliance programme.
Plan an ISO engagement
Discuss the standards your client is working towards and the support they require. We’ll confirm the proposed scope, delivery responsibilities and commercial terms.
Discuss an ISO requirementPresent a clearer security picture
Help clients organise security and compliance evidence for conversations with their insurance adviser. Explore how the Fig platform supports that preparation.
Explore insurance-related evidence Fig does not provide insurance advice, placement or underwriting.Working with Fig
Extend your capability. Maintain your service standards.
Support ongoing client needs
Plan certification renewals, monitoring and further assessments around the client’s requirements, rather than treating each engagement in isolation.
Coordinate service delivery
Agree scope, timescales, reporting and handovers before work begins, so your team can set clear expectations with the client.
Combine complementary expertise
Bring your knowledge of the client’s environment together with Fig’s certification assessment and specialist security capabilities.
Reduce supplier fragmentation
Access certification, software and security reviews through one partner relationship, with responsibilities confirmed for each service.
Delivery responsibilities
A clear division of responsibilities.
Agree how your team and Fig will work together before the first engagement. The operating model reflects the services and partnership structure you select.
Your teamFig
Manage the client relationship under the agreed partner model.Deliver the software, assessment or specialist service within the contracted scope.
Confirm client requirements, access arrangements and permissions.Define the assessment approach, required inputs and reporting arrangements.
Coordinate the client’s review and required certification sign-off.Carry out the certification assessment through Fig Compliance Ltd.
Agree who implements changes and supports the client after delivery.Provide findings and contracted follow-up support, with responsibilities made explicit.
Questions
What to know before you start.
Commercial arrangements, branding and certification responsibilities.
Who is the partnership designed for?
IT resellers, value-added resellers, MSPs, MSSPs and professional advisers. The model depends on whether you introduce clients, manage the commercial relationship or deliver a branded managed service.
Can we retain the client relationship and use our own brand?
Offer Fig’s platform, security testing and certification services under your brand while keeping the client relationship. We agree branding, delivery responsibilities and client communications with you. Certification remains subject to scheme rules: required certification-body details, scheme marks and client declarations are retained.
Can an MSP complete Cyber Essentials for a client?
We work with MSPs to certify their clients. Your team can complete the Cyber Essentials self-assessment on the client’s behalf, provided the organisation reviews and authorises the submission and its board-level representative or equivalent provides the required sign-off in the Cyber Essentials portal. Fig Compliance Ltd carries out the certification assessment; the client organisation holds the certificate.
Do we need a platform subscription to offer certification?
No. Certification can be purchased separately. The platform and specialist services can complement an engagement, but they do not replace the required assessment or guarantee certification.
How are commercial terms agreed?
Partner rates, billing, referral arrangements where applicable, delivery scope and support responsibilities are confirmed in your terms. We discuss intended services and expected volumes before proposing a commercial structure.
Can Fig support an MSP expanding its MSSP offering?
Yes. Combine the Fig platform with certification and scoped specialist security services to broaden your client offering. We agree which activities Fig delivers and which remain with your team. The partnership does not imply that every security operation or incident-response service is included.
Can we discuss ISO requirements or insurance-related evidence?
Yes. Include these requirements in your enquiry so we can confirm an appropriate scope. ISO engagements require a specific proposal. Fig’s insurance-related offering concerns security and compliance evidence, not insurance advice, placement or underwriting.
Partner with Fig
Let’s discuss your client offering.
Tell us which services interest you and a little about the clients you support. We’ll discuss the delivery model and commercial arrangements with you.
Not sure which model fits? We can work through the options together.