CGI UK has successfully achieved National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy (ACSC) Scheme across all three core consultancy specialisms:

  • Audit and Review

  • Security Architecture

  • Risk Management

This recognition demonstrates CGI's commitment to delivering trusted, independent cyber security consultancy that meets the rigorous standards set by the UK Government's National Cyber Security Centre (NCSC).

What is the NCSC ACSC Scheme?

The NCSC Assured Cyber Security Consultancy Scheme provides organisations with confidence that accredited consultancies have demonstrated the capability, governance and technical expertise required to deliver high-quality cyber security consultancy within complex and high-risk environments.

The scheme is recognised across UK Government, Defence, Critical National Infrastructure (CNI), regulated industries and the wider public sector, providing assurance that consultancy services align with NCSC guidance and industry best practice.

Find out more about the scheme

What this means for our clients

Achieving all three consultancy specialisms enables CGI to provide NCSC-assured consultancy services spanning the full cyber security lifecycle across both Information Technology (IT) and Operational Technology (OT) environments.

Our consultancy services help organisations understand, assess and manage cyber risk while strengthening resilience across business-critical and operational systems.

  • Audit and Review

Providing independent assurance of cyber security governance, technical controls and operational effectiveness across IT and OT environments. Our reviews help organisations assess compliance with regulatory requirements, industry standards and organisational policies, while identifying practical opportunities to improve cyber resilience.

  • Security Architecture

Designing secure, resilient and sustainable technology architectures that protect digital services, operational technology and critical business functions. We help organisations embed security throughout transformation programmes while supporting secure-by-design principles and long-term operational resilience.

  • Risk Management

Supporting organisations to identify, assess and manage cyber risk through proportionate governance, risk management frameworks and evidence-based decision making. Our consultants help organisations balance business objectives with security outcomes, enabling informed investment and risk decisions.

Supporting Critical National Infrastructure and regulated sectors

CGI has extensive experience supporting organisations operating within UK Government, Defence, Critical National Infrastructure and highly regulated industries, where security, resilience and operational continuity are fundamental.

Our consultants work across sectors including energy, transport, utilities, financial services and healthcare, helping clients protect both enterprise IT systems and industrial control and operational technology environments.

CGI's ACSC capability enables support organisations delivery in secure digital transformation, improvements of cyber resilience, protecting critical services and meeting evolving regulatory and assurance expectations.

Supporting national cyber resilience

ACSC scheme partnership complements CGI's broader commitment to supporting UK national cyber resilience.

Our consultancy services help organisations to align with recognised frameworks and guidance, including the NCSC Cyber Assessment Framework (CAF), the Cyber Assessment Framework (CAF) Profiles, Secure by Design principles, and wider UK Government cyber security policy and resilience initiatives.

Through audit, architecture and risk management, we enable organisations to build resilient systems that can anticipate, withstand, recover from and adapt to cyber threats, supporting both operational resilience and the delivery of essential public and critical services.

A team achievement

Achieving ACSC partnership is the result of months of collaboration, preparation and continuous improvement across our cyber consulting practice.

The partnership recognises the professionalism, technical expertise and dedication of our consultants and support teams, who consistently deliver high-quality cyber security consultancy to clients operating in some of the UK's most demanding environments.

Looking ahead

As cyber threats continue to evolve and organisations increasingly depend upon interconnected digital and operational technologies, trusted independent cyber security consultancy has never been more important.

Our achievement under the NCSC Assured Cyber Security Consultancy Scheme reinforces CGI's commitment to helping organisations strengthen cyber resilience, protect critical services, manage cyber risk and securely deliver digital transformation across both IT and OT environments.

Whether supporting UK Government, Critical National Infrastructure, regulated industries or commercial organisations, CGI remains committed to delivering trusted cyber security consultancy that helps clients build secure, resilient and trusted organisations.

If you would like to discuss how CGI's NCSC Assured Cyber Security Consultancy services can support your organisation, please get in touch with our Cyber Security team.