Methods achieves prestigious NCSC Assured service status for Audit and Review
Cyber Security • August 08, 2025 • Written by: Methods • Read time: 2 mins

Methods is proud to announce it has successfully obtained National Cyber Security Centre (NCSC) assured service status for Audit and Review. This new accreditation is a significant milestone, adding to the company’s existing suite of NCSC assured services, including Risk Management, GovAssure, and Cyber Resilience Audit (CRA).
This achievement reaffirms Methods' position as a trusted partner for government, public and private sector organisations, providing high-quality cyber security consultancy services that meet the NCSC’s rigorous standards. With this expanded portfolio, Methods is uniquely positioned to help organisations build robust cyber resilience and navigate the complex landscape of digital threats.
"We're thrilled to add Audit and Review to our list of NCSC assured services. This new NCSC Assured Service demonstrates our continued commitment to excellence and our dedication to providing our clients with the highest level of cyber security expertise. In an environment where cyber threats are constantly evolving, this assurance gives our clients the confidence that they are working with a proven and trusted provider."
Gareth Jones [Executive director / CISO at Methods].
The Business Benefits of NCSC Assured Services
Choosing an NCSC assured service provider like Methods offers significant advantages for organisations, particularly those in the public sector or critical national infrastructure.
- Trust and Confidence: NCSC assurance is the gold standard for cyber security in the UK. By choosing an assured provider, organisations have the confidence that they are working with a company that has been independently and rigorously assessed and meets the NCSC's high standards.
- Proven Expertise: NCSC assured providers have a demonstrated track record of delivering high-quality services. The assurance process verifies that the company's consultants have the necessary skills, knowledge, and experience to effectively address complex cyber security challenges.
- Reduced Risk: A primary benefit is the reduction of cyber risk. By working with an assured company, organisations can better understand their security posture, identify vulnerabilities, and implement effective mitigations to protect their systems and data from attack.
- Clearer Procurement: For government and public sector organisations, using an NCSC assured provider simplifies the procurement process, as the company's credentials and quality of service have already been verified by the national technical authority for cyber security.
Alignment with Government Strategy
This expansion of Methods' NCSC assured services directly supports the UK government's strategic cyber security objectives, as outlined in the Government Cyber Security Strategy. The strategy aims to make the UK the safest place to live and work online by ensuring that all public sector organisations are resilient to cyber threats.
- GovAssure and CRA: Methods' GovAssure and Cyber Resilience Audit (CRA) services align with the government's adoption of the Cyber Assessment Framework (CAF) as the primary assurance framework. These services help organisations assess their cyber resilience consistently and comparably, which is a key goal of the strategy.
- Defend as One: The government's "Defend as one" pillar emphasises a joined-up, collective response to cyber threats. By providing assured services, Methods helps strengthen the overall cyber resilience of government departments, contributing to a stronger, better-defended public sector.
- Skilled Workforce: The strategy also focuses on building a skilled cyber security workforce. Methods' team of NCSC Certified Professionals and assured services demonstrates a commitment to maintaining a high level of expertise, which is crucial for achieving the strategy’s vision.
Methods’ new Audit and Review assured service, coupled with its existing assured services, empowers organisations to not only meet but exceed the government’s cyber security standards, building a more secure and resilient digital future for the UK.