Find out more about Prism Infosec

Prism Infosec is an award winning cyber security consultancy based in Cheltenham and Liverpool, UK and was founded in 2006. The Company has delivered information security consultancy and assessment services to some of the world’s largest organisations. Prism Infosec is an independent firm, so our clients can be assured that our advice is truly pragmatic and not designed to up-sell other security products and services.

Uniquely, Prism Infosec’s consultants possess both business and management focus but also a broad range of technical skill. Whether delivering advice on cutting edge information security architectural solutions, conducting management controls audits, or in-depth technical penetration testing our consultants always deliver a quality end-to-end service.

It is our ethos that our clients work with professional and experienced consultants (all background checked and vetted to the BS:7858 standard) at all times and customer satisfaction is our number one priority. We always ensure a prompt and efficient service and provide deliverables that can be used effectively by our audience at any level of the business.

Prism Infosec is a STAR member of CREST, the not for profit organisation that serves the needs of a technical information security marketplace requiring the services of a regulated professional services industry.

Prism Infosec is also a National Cyber Security Centre CHECK Green Light company, offering high quality penetration testing and IT Health Checks to UK Government departments.

We are also certified to the UK Government originated Cyber Essentials Plus (CE+) scheme which independently verified that our workstations and Internet connectivity are setup securely to the standard defined by the National Cyber Security Centre. Prism Infosec is a Cyber Essentials Plus certifying body, so we also offer certification services to our clients.

Prism Infosec is a Payment Cards Industry (PCI) Qualified Security Assessor (QSA) with experience of conducting audits for level 1 merchants and producing the required Report on Compliance (ROC) and Attestation on Compliance (AOC) documents.

Prism Infosec’s innovative approach to the delivery of PCI projects and technical security testing was recognised with a PCI Award for Technical Excellence in January 2020. The award was presented for the delivery of a client project that was considered by the review panel to be an outstanding example of best practice.

Prism Infosec maintains a certified (UKAS-accredited) ISO27001:2013 Information Security Management System and ISO9001:2015 Quality Management System (QMS). We believe that this demonstrates that information security and quality is at the heart of all our service offerings and client relationships.

The Company prides itself on the delivery of complex engagements to its customers, across a number of our service offerings: –

• Enterprise application testing;
• Bespoke infrastructure and red team engagements;
• Mobile application reviews (iOS, Android, Blackberry, Windows Phone);
• Cryptographic analysis and reverse engineering; and
• Social Engineering, phishing campaigns and simulated cyber-attacks.

The National Cyber Security Centre recommends that commercial organisations seek penetration testing from organisations utilising CHECK, CREST and Cyber Scheme certified individuals. Prism Infosec’s managing consultants hold the CREST Certified Tester (CCT) certifications which are considered the gold standard in the industry, so our customers can be assured of the quality of our work and deliverables.