We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk

Actica Consulting Limited review

Advisory firm

A UK cyber-security consultancy assured by the NCSC for risk management and security architecture, whose G-Cloud listing shows work for essential services in energy, transport, health and finance.

Relevant if you run essential services and need NCSC-assured security architecture, risk or audit work

Price Published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

Actica Consulting scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 2/5
Qualifications of the people who do the work 4/5
What it publishes about fees 3/5
Knowledge of your sector 4/5
Independence from what it sells 4/5
Who carries the risk if the advice is wrong 2/5

What Actica Consulting offers, and what it publishes

Actica Consulting publishes a day rate: £300 to £1,430 per consultant per day, on the UK government's G-Cloud marketplace. The NCSC register lists it for risk management, security architecture and cyber resilience audits. Its G-Cloud listing says it holds ISO/IEC 27001 from BSI and Cyber Essentials Plus, and that its consultants include CISSP holders and NCSC Certified Cyber Professionals.

Actica Consulting does not publish a price on its own website, only on G-Cloud. It does not publish its indemnity cover, or say how it uses AI or where client data goes in AI tools. Its cyber-security page names no practice lead and shows no case study with a measured client result.

Private equity firm Sovereign Capital Partners has owned Actica since a 2022 management buyout. In October 2024 the investor added Gemba Advantage, which it calls a software and data engineering business, to the group. We found no ISO/IEC 42001 or AI-governance service on its site. Its G-Cloud listing shows work under the UK NIS Regulations.

Strengths

  • NCSC-assured cyber security consultancy for both Risk Management and Security Architecture, confirmed directly on the NCSC register.
  • ISO/IEC 27001 certified by BSI (18 Jan 2023) and holds Cyber Essentials Plus, published on its own G-Cloud listing.
  • G-Cloud listing discloses named professional credential types held by its consultants (Chartered Cyber Security Professional, NCSC Certified Cyber Professional, CISSP).
  • Published, itemised day-rate card (£300-£1,430/day) via the G-Cloud Digital Marketplace, giving buyers an upfront, firm-published pricing reference.
  • A specific, service-page-documented cyber-assurance practice (SABSA architecture, ISO27005/NIST/Octave risk work, GovAssure and Cyber Resilience Audits, ISO27001/ISMS implementation) rather than a generic listing.

Things to check

  • No professional indemnity insurance figure or policy is published anywhere on Actica's own website (terms/privacy notice) or its G-Cloud listings reviewed.
  • Actica does not publicly disclose how it itself uses AI internally or where client data goes when processed by AI tools.
  • No individually named cyber-assurance practice lead, and no case study with a quantified client outcome, appears on Actica's public cyber-security service page.
  • Actica has been privately-equity owned by Sovereign Capital Partners since a 2022 management buyout, and in 2024 acquired Gemba Advantage, described by the investor as a software and data engineering business.

Common questions

Does Actica publish its fees?

Yes, on G-Cloud. Its Digital Marketplace listing gives a day rate of £300 to £1,430 per consultant per day. Its own website gives no prices.

Is Actica certified to ISO/IEC 27001?

Its G-Cloud listing says so. It states ISO/IEC 27001 certification by BSI, dated 18 January 2023, plus Cyber Essentials and Cyber Essentials Plus.

Does Actica disclose professional indemnity insurance?

No. Its terms, privacy notice and G-Cloud listings give no indemnity figure or policy.

Does Actica offer AI governance or ISO/IEC 42001 work?

No such service appears on its website. Its published work is security architecture, risk, audit and ISO 27001 implementation.

Evidence for each Actica Consulting score

Show our working

Notes behind each thing to check

  • No professional indemnity insurance figure or policy is published anywhere on Actica's own website (terms/privacy notice) or its G-Cloud listings reviewed. (Actica's terms/privacy notice (actica.co.uk/terms) and the G-Cloud service listing contain no professional indemnity insurance disclosure.)
  • Actica does not publicly disclose how it itself uses AI internally or where client data goes when processed by AI tools. (Actica's own privacy notice at actica.co.uk/terms sets out data-sharing purposes but makes no statement about the firm's internal AI tool use or data flows.)
  • No individually named cyber-assurance practice lead, and no case study with a quantified client outcome, appears on Actica's public cyber-security service page. (actica.co.uk/services/cyber-security and actica.co.uk/about-us list service lines and values but name no individual consultant or outcome metric.)
  • Actica has been privately-equity owned by Sovereign Capital Partners since a 2022 management buyout, and in 2024 acquired Gemba Advantage, described by the investor as a software and data engineering business. (Sovereign Capital Partners' own portfolio page states the 2022 MBO and the October 2024 acquisition of software/data-engineering firm Gemba Advantage.)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 2/5 No named breach-response or regulator-defence case study was found; its NCSC/GovAssure and Cyber Resilience Audit work found is assurance/audit-side, not defence-side, work.
Qualifications of the people who do the work 4/5 NCSC register confirms assured status for Risk Management and Security Architecture; G-Cloud listing discloses ChCSP, CCP and CISSP-qualified consultants.
What it publishes about fees 3/5 A day-rate card (£300-£1,430/day) is published via G-Cloud, but Actica's own website discloses no pricing or fee-model policy at all.
Knowledge of your sector 4/5 G-Cloud CNI listing shows specific NIS Regulations and Cyber Assessment Framework work for Operators of Essential Services across energy, transport, health and finance.
Independence from what it sells 4/5 Core model is time/day-rate consultancy per its published G-Cloud rate card, not a security-software vendor, though it has been PE-owned since a 2022 MBO.
Who carries the risk if the advice is wrong 2/5 No professional indemnity insurance level or policy is disclosed on Actica's own terms, privacy notice or G-Cloud listings reviewed.

Sources for Actica Consulting

  • Actica Consulting Limited is registered at Companies House, active, incorporated 3 July 1997, registered office 4 Stirling House, Stirling Road, Surrey Research Park, Guildford, Surrey, GU2 7RF. (Company no. 03396854, status Active, incorporated 1997-07-03) (Companies House, checked 19 September 2026)
  • Current officers listed at Companies House are directors Robin Jonathan Davis (since 1 May 2014), Matthew James Gibson (since 1 July 2017) and Michael John Murphy (since 9 December 2025), and secretary Alan Mitchell (since 30 January 2024). (4 active officers) (Companies House, checked 19 September 2026)
  • Actica Consulting is listed on the NCSC register as an NCSC-assured cyber security consultancy for Risk Management and Security Architecture, and separately for the Cyber Resilience Audit scheme. (NCSC Assured Cyber Security Consultancy (Risk Management, Security Architecture) + Cyber Resilience Audit scheme) (ncsc.gov.uk, checked 19 September 2026)
  • Actica's own cyber-security service page describes security architecture work using SABSA methodology, risk assessment against ISO27005/NIST/Octave, GovAssure and Cyber Resilience Audits, SOC2 and ISO27001 audits, and ISO27001/ISMS implementation support. (Security architecture, risk, audit and ISMS implementation service lines) (actica.co.uk, checked 19 September 2026)
  • Actica's published G-Cloud (Digital Marketplace) listing states ISO/IEC 27001 certification by BSI dated 18 January 2023, ISO 14001:2015 certification, Cyber Essentials and Cyber Essentials Plus achieved, and a day-rate range of £300 to £1,430 per consultant per day. (ISO 27001 (BSI, 2023-01-18); Cyber Essentials + Plus; day rate £300-£1,430) (G-Cloud, checked 19 September 2026)
  • Actica's own privacy/terms page names Joseph Bennett as Data Protection Officer and states data is processed for Actica's or a third party's legitimate interest, with time-sensitive special-category data anonymised in bids/surveys; it contains no statement on how Actica itself uses AI internally or professional indemnity insurance. (DPO named; no self-disclosed AI-use or PI insurance statement) (actica.co.uk, checked 19 September 2026)

NCSC-assured cyber security consultancy for Risk Management and Security Architecture (stated on the NCSC register, checked 2026-09-19). NCSC Cyber Resilience Audit scheme (stated on the NCSC register, checked 2026-09-19). ISO/IEC 27001 certified by BSI, dated 18 January 2023 (stated on Actica's G-Cloud Digital Marketplace listing, checked 2026-09-19). Cyber Essentials and Cyber Essentials Plus achieved (stated on Actica's G-Cloud Digital Marketplace listing, checked 2026-09-19).

Regulated sectorsSeeking ISO 42001 certification

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.