CSIQ was founded in 2020, bringing together more than 20 years' experience across IT infrastructure, information security and digital forensics.
Today our work centres on two things: certifying organisations against recognised cyber security standards, and investigating digital incidents and disputes when something goes wrong.
That experience shapes both. In an assessment, it means we can tell a control that works from one that only looks good on paper. In an investigation, it means we know where the evidence is likely to be.
We are deliberately small, which keeps us close to every piece of work.
We follow the evidence and the published requirements, and nothing else. A finding or an assessment result is never shaped by commercial considerations.
If the evidence does not support the theory, we say so. If you are not ready for certification, we tell you before you pay for an assessment.
We hold as little client data as the work allows. What we do hold is encrypted and stored in UK data centres. Case material is securely destroyed at the end of an engagement, with written confirmation.
You get a fixed quote or an agreed estimate before work starts, and you can see the time spent.
Founder and Principal Consultant
David has more than 20 years' experience in IT and security, from data centre infrastructure to security architecture. He holds industry qualifications in digital forensics and penetration testing, and leads CSIQ's investigation and forensic work.
David is an IASME-qualified assessor for Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance and Defence Cyber Certification Level 0.
Outside work, David takes part in charity runs and long-distance walks.
Cyber Essentials
Cyber Essentials Plus
DCC Level 0
IASME Cyber Assurance Level 1
IASME Cyber Assurance Level 2 + Quality Principles
Cyber Intelligence & OSINT
Cyber Investigation
Digital Forensics
Compliance & Governance