Cybersecurity, IS Audit
& Digital Assurance
We provide risk-based cybersecurity, information systems audit and regulatory assurance services to organisations operating in complex and highly regulated environments — including online gaming, financial services, insurance and cloud-dependent businesses.
Framework Alignment
Security Readiness
Alignment Ready
An Independent Cybersecurity & Audit Consultancy
Cutlass Group is an established UK security services group now extending its capability into cybersecurity and information systems audit — providing independent, evidence-based and technically informed assurance services alongside our physical security, training and recruitment divisions.
Our approach combines information systems auditing, cybersecurity risk assessment, governance, regulatory compliance and technical security testing. We examine how technology risks are governed, how controls operate in practice and whether appropriate evidence exists to demonstrate compliance.
Independence & Impartiality
Objective findings free from commercial or operational conflicts of interest.
Confidentiality & Professional Integrity
Strict information-handling protocols on every engagement.
Evidence-Based Conclusions
All findings supported by documented, verifiable evidence.
Risk-Focused Audit Planning
Effort proportionate to material risks and business impact.
Clear & Practical Reporting
Actionable recommendations intelligible to technical and non-technical stakeholders.
Protecting Systems. Strengthening Controls. Supporting Compliance.
Modern organisations require more than a basic compliance review. They need to understand whether their systems, people, processes and third-party relationships provide effective protection against real operational and cyber risks.
Our specialist team brings together experience in information technology, cybersecurity, IS audit, compliance, financial controls and regulated business operations — backed by Cutlass Group's established reputation for reliable, professional service delivery across the UK.
iGaming & Online Gambling Focus
We have a particular focus on online gambling and gaming technology platforms, where cyber controls, RTS compliance, player-data protection and third-party supplier assurance are under increasing regulatory scrutiny from the UK Gambling Commission and international licensing bodies.
View iGaming Services →
Assurance Beyond a Checklist
We assess the design and operating effectiveness of controls across the complete technology environment using a structured, risk-focused lifecycle.
Engagement & Scoping
Understanding the organisation, regulatory environment, critical systems and audit objectives.
Risk Assessment
Identifying threats, vulnerabilities, dependencies and areas of significant exposure.
Control Mapping
Mapping applicable requirements to policies, systems, processes and technical controls.
Evidence Collection
Reviewing documents, configurations, logs, records, interviews and system-generated evidence.
Control Testing
Assessing whether controls are suitably designed and operating effectively.
Findings Evaluation
Classifying observations and nonconformities according to risk and business impact.
Reporting
Producing clear findings, supporting evidence and prioritised recommendations.
Remediation Follow-Up
Reviewing corrective actions and confirming identified weaknesses have been addressed.
Specialist Assurance for the Online Gambling Industry
The online gambling sector faces a unique convergence of cybersecurity, data-protection and regulatory-compliance obligations. UK Gambling Commission Remote Technical Standards (RTS), PCI DSS, GDPR and B2B supplier assurance requirements demand a consultancy that understands the architecture of gaming platforms, not just generic IT controls.
Platform & Game Security
Security reviews of RNG systems, game logic, platform APIs, and transaction controls to meet operator and supplier assurance obligations.
Player Account Protection
Identity control reviews, customer data protection assessments and AML/KYC control evaluations aligned to UKGC licence conditions.
Payment & Transaction Controls
Payment-security control reviews, PCI DSS gap assessments, fraud-control effectiveness and e-wallet transaction monitoring.
B2B & Supplier Assurance
Third-party technology supplier due diligence, platform provider risk assessments and contractual security-control reviews.
RTS & Regulatory Readiness
UK Gambling Commission RTS security-control readiness, critical-system identification, pre-audit evidence preparation and compliance tracking.
Penetration Testing
Web-application, API, network and cloud security testing on gambling platforms, with documented authorisation and agreed rules of engagement.
Regulatory & Standards Framework
What We Do
Twelve specialist service lines covering the full spectrum of cybersecurity assurance, IS audit, regulatory compliance and digital forensics. Every engagement is scoped to your systems, regulatory obligations and risk profile.
Information Systems & IT Audit
Independent, risk-based assessment of information systems, technology controls and governance arrangements.
ISO/IEC 27001 Readiness & Internal Audit
Preparing your ISMS for independent certification against ISO/IEC 27001:2022.
Online Gambling & Gaming Security Assurance
Specialist assurance for gambling operators, gaming platforms, software providers and B2B technology suppliers.
Cybersecurity Risk & Governance
Helping boards and management establish proportionate oversight of information and cyber risk.
Vulnerability Assessment & Penetration Testing
Identifying exploitable weaknesses before they are used by malicious actors. All testing with documented authorisation and agreed rules of engagement.
Digital Forensics & Incident Support
Structured assistance following suspected cyber incidents, data breaches, fraud or unauthorised system activity.
Data Protection & Privacy Assurance
Assessment of technical and organisational controls protecting personal and sensitive information under UK GDPR.
Cloud & Third-Party Security
Assessing risks from cloud infrastructure, outsourced services and technology supply chains.
Business Continuity & Cyber Resilience
Preparing organisations for technology disruption, ransomware, system failure and operational incidents.
Post-Quantum Cybersecurity Readiness
Strategic support for organisations preparing for cryptographic risks associated with quantum computing.
Security Awareness & Professional Training
Practical training tailored to management, employees, technology teams and audit personnel.
Remediation & Continuous Assurance
Supporting clients through corrective action implementation, retesting and ongoing control monitoring.
Cybersecurity Certifications
EC-Council credentials across network defence, ethical hacking, incident handling and digital forensics.
Certified Network Defender
Network defence and security operations
Certified Incident Handler
Incident response and handling
Computer Hacking Forensic Investigator
Digital forensics and investigation
Certified Ethical Hacker
Ethical hacking and vulnerability assessment
Certified Ethical Hacker Practical
Practical security assessment
Certified Ethical Hacker — additional badge
Additional supplied CEH badge artwork
These badges relate to individual professional qualifications, not corporate or UKAS accreditation. Verification of relevant individuals' credentials can be requested when discussing an engagement.
Building a Trusted, Independent Assurance Capability
Our services are being developed within a conformity-assessment framework with the objective of aligning UKAS accreditation against ISO/IEC 17065:2012 for a clearly defined product-certification scope. Our methodology is designed to be consistent with the standards and practices of UKAS-accredited bodies. Any formal accreditation will be announced only after independent confirmation and will clearly identify the activities covered by the approved scope.
Our Development Roadmap
Define Certification Scheme & Scope
Identifying the initial accreditation scope, sector focus and certification scheme design.
Independence & Impartiality Safeguards
Establishing structural independence, conflict-of-interest controls and impartiality policy.
Quality Management System
Implementing a formal QMS aligned to ISO/IEC 17065 requirements.
Competence Demonstration
Documenting and evidencing technical competence across defined scope areas.
Internal Audits & Management Review
Running internal audits, management reviews and corrective-action cycles.
UKAS Formal Assessment
Submitting for UKAS assessment, resolving nonconformities and receiving accreditation decision.
Standards We Align To
ISO/IEC 17065:2012
Conformity assessment — requirements for bodies certifying products, processes and services. Our primary target accreditation standard.
ISO/IEC 27001:2022
Information security management system standard. We deliver readiness, gap assessment and internal audit services to help clients achieve certification through an accredited certification body.
ISO/IEC 17025:2017
General requirements for the competence of testing and calibration laboratories. Referenced for our technical security testing methodology design.
UK Gambling Commission RTS & NIS2
Remote Technical Standards security controls and the incoming UK Cyber Security and Resilience Bill requirements for ICT-dependent and cloud-dependent organisations.
Cutlass Group — SIA Approved Contractor
Cutlass Group Ltd holds SIA Approved Contractor Status (ACS) for the provision of Security Guarding Services — an independently assessed standard demonstrating commitment to quality, compliance and professional service delivery.
What Makes Us Different
Independent & Risk-Focused
No conflicts of interest. Our conclusions follow the evidence, not commercial relationships or pre-existing solutions.
Evidence & Traceability
Every finding supported by documented, verifiable evidence. Reports you can present to regulators, boards and auditors.
iGaming Sector Knowledge
Understanding of gambling platform architecture, UKGC RTS obligations, B2B supplier structures and player-data requirements.
Audit & Technical Combined
Combining IS audit rigour with hands-on technical testing capability — from governance review to penetration testing.
Clear Communication
Findings expressed clearly for technical and non-technical audiences. No unnecessary jargon in executive reporting.
Proportionate Recommendations
Practical, prioritised recommendations scaled to your organisation's size, risk profile and resource constraints.
Transparent About Capabilities
We clearly describe what we can and cannot do, and what requires collaboration with specialist or accredited partners.
Direct Senior Attention
Backed by Cutlass Group's track record in UK security services, every cyber and audit client receives direct, senior-level engagement — not junior delivery under a distant partner.
Standards-Aligned Methodology
Work designed to be consistent with ISO, NIST, COBIT, Cyber Essentials and applicable regulatory requirements.
Discuss Your Cybersecurity or Audit Requirements
Contact us if your organisation requires an independent security review, information systems audit, regulatory-readiness assessment, or assistance with improving its control environment. An initial discussion is always confidential and without obligation.
Initial Discussion Covers:
- ✓ Your regulatory environment
- ✓ Systems requiring assessment
- ✓ Applicable standards
- ✓ Scope and exclusions
- ✓ Timescales and deliverables
- ✓ Confidentiality arrangements