Government & Regulations

Undertake an external audit and meet all compliance criteria with the International Organization for Standardization (ISO) standards, including ISO 27001 and ISO/IEC 17025:2015. Fox-IT has achieved ISO 27001 certification and is ideally placed to help implement the standard as well as achieve certification.

NIST CSF provides guidance for carrying out risk assessments and describes the interrelationships between the various components of the organizational risk management process.

CC is an international standard for computer security certification. Where a product category has an international CC PP available, we are able to support you in evaluating CC against the equivalent CPA Security Characteristic (SC).

The purpose of CTAS is to provide answers to assurance questions and concerns from accreditors, which are usually from the pre-deployment stage. A tailored evaluation is then conducted and key results that may impact business are highlighted.

To achieve ASSURE accreditation, Fox-IT is subject to a rigorous and continuous accreditation process under the ASSURE framework. We have ASSURE Cyber Professionals accredited to conduct audits in all of the following three specialisms: Cyber Audit & Risk Management, Technical Cyber Security, and Industrial Control Systems.

Suppliers bidding for contracts with the UK Government can demonstrate their ability to securely handle sensitive and personal information by certifying against the Cyber Essentials scheme. This service is also suitable for organizations of any size, in any sector.

Ensure you are compliant with the UK Government Cloud (G-Cloud) program to sell cloud hosting, software, and support services on the Digital Marketplace.

The NCSC IT Health CHECK (ITHC) or CHECK scheme was developed by the UK Government’s information assurance division. We possess CHECK Green status (the highest level of assurance) and can implement an IT Health Check in less than a month.

The CPA scheme is designed to provide additional assurance to HMG when choosing commercial security products. The UK scheme is administered by NCSC, the Government’s National Technical Authority for Information Assurance.

We can assist your organization in understanding and complying with Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation (DFAR) and prepare for CMMC. Fox-IT stays current with both the DoD Office of the Under Secretary of Defense for Acquisition & Sustainment and CMMC Accreditation Body updates.

Our team of government security professionals are well versed in the OMB and DHS (and other Agency and DoD mandates), NIST 800 series, FIPS publications, DOD Directives, Manuals and Instructions and other essential standards needed to comply with FISMA.

Depending on where you are in your FedRAMP journey, we can help you achieve an Authority to Operate (ATO) and secure government business. We will staff your projects with subject matter experts that are familiar with the technologies you use to provide appropriate and effective support for your project. Today, half of all companies that are FedRAMP authorized are clients of Fox-IT parent company NCC Group.

Adversarial Attack Simulation Exercises (AASE) are similar to Red Team exercises and are designed to assess and enhance the resilience of Financial Institutions doing business in Singapore against sophisticated attacks.

The Australian Prudential Regulation Authority (APRA) has created the APRA CPS 234 standard to ensure APRA-monitored organizations are more resilient to cyber attacks and can respond quickly should a breach occur.

The Cyber Operational Resilience Intelligence-led Exercises (CORIE) framework has been developed by the Reserve Bank of Australia (RBA), on behalf of the CFR, to aid in preparation and execution of industry-wide cyber resilience exercises.