Cyber Essentials Plus gets you on the list. ISO 27001 is the step up when the contracts get bigger.
Councils, schools and multi-academy trusts, housing providers and police forces all ask suppliers how they protect data. ClearIMS helps you build and run an ISO 27001 information security management system (ISMS), so tender security questions and framework answers come from approved records, not a scramble the week before the deadline.
20 minutes with the founder · video or phone · free. Founding places: £150 a month locked for 24 months, after a 30-day free trial with a worked example ISMS (AI drafting starts on a paid plan). No VAT charged.
What public-sector buyers ask you for
Cyber Essentials as the floor
Many public-sector contracts ask for Cyber Essentials, or Cyber Essentials Plus, as a minimum. It shows the basic technical controls are in place.
ISO 27001 as the step up
Where the data is more sensitive or the contract is bigger, buyers often ask for ISO 27001: a management system that shows you know your risks and run security, not just configure it.
Tender security questions
Each tender has its own security section and a deadline that doesn’t move. The answers need to agree with each other and with what you actually do.
G-Cloud and framework applications
Applying to G-Cloud means describing how your service and its data are protected. Buyers read those answers when they compare suppliers.
Cyber Essentials checks your technical controls. ISO 27001 is the management system around them: risks, policies, owners, reviews and evidence. Running one makes every tender’s security section easier to answer.
How ClearIMS helps you answer the next tender
The AI drafts and does the admin. A named person in your organisation approves every record; the AI never approves anything.
Security questions answered from your records
AI drafts answers to customer security questionnaires from your approved records, with sources, so your bid team can check each answer against the policy it came from.
A virtual ISMS manager that chases the work
Owners get an email when an action is due or overdue, and reply in plain English to update it. When a buyer asks when you last reviewed access or tested a restore, the answer is on record.
Got 5 minutes or 5 hours? Start at the top
The Recommended tasks list puts the ISO 27001 work in order, most important first. Whenever someone has time, they work down it, and every task they finish moves your ISMS forward.
“Show me” goes straight to the line
Link a policy to a control in your Statement of Applicability and highlight the lines that relate to it. When an auditor asks “show me”, the link takes you straight to the highlighted part.
Bring your next tender’s security questions to a 20-minute call.
We’ll show you how ClearIMS would handle them and give you a straight answer on whether it fits your team.
- 30-day free trial first, with a worked example ISMS. AI drafting starts on a paid plan.
- Then a founding place locks £150 a month for 24 months, or £1,500 a year upfront.
- One price for your organisation, unlimited users. No VAT charged.
FURTHER READING
Cyber Essentials vs ISO 27001: which do you need?
7 min read · UpdatedThe difference between Cyber Essentials and ISO 27001, what each costs and proves, and which to do first if a customer or tender is asking.
What is a customer security questionnaire, and how do you answer one?
7 min read · UpdatedWhy customers send security questionnaires, what they ask, how to answer them quickly and honestly, and how ISO 27001 makes the next one easier.