# Actica Consulting Limited - **Type:** Advisory firm - **Website:** https://www.actica.co.uk/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK cyber-security consultancy assured by the NCSC for risk management and security architecture, whose G-Cloud listing shows work for essential services in energy, transport, health and finance. ## Actica Consulting scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 No named breach-response or regulator-defence case study was found; its NCSC/GovAssure and Cyber Resilience Audit work found is assurance/audit-side, not defence-side, work. ### Qualifications of the people who do the work: 4/5 NCSC register confirms assured status for Risk Management and Security Architecture; G-Cloud listing discloses ChCSP, CCP and CISSP-qualified consultants. ### What it publishes about fees: 3/5 A day-rate card (£300-£1,430/day) is published via G-Cloud, but Actica's own website discloses no pricing or fee-model policy at all. ### Knowledge of your sector: 4/5 G-Cloud CNI listing shows specific NIS Regulations and Cyber Assessment Framework work for Operators of Essential Services across energy, transport, health and finance. ### Independence from what it sells: 4/5 Core model is time/day-rate consultancy per its published G-Cloud rate card, not a security-software vendor, though it has been PE-owned since a 2022 MBO. ### Who carries the risk if the advice is wrong: 2/5 No professional indemnity insurance level or policy is disclosed on Actica's own terms, privacy notice or G-Cloud listings reviewed. ## Sources for Actica Consulting Every line carries the page it was read on and the date it was checked. - Actica Consulting Limited is registered at Companies House, active, incorporated 3 July 1997, registered office 4 Stirling House, Stirling Road, Surrey Research Park, Guildford, Surrey, GU2 7RF. - Source: https://find-and-update.company-information.service.gov.uk/company/03396854 - Checked: 2026-09-19 - Current officers listed at Companies House are directors Robin Jonathan Davis (since 1 May 2014), Matthew James Gibson (since 1 July 2017) and Michael John Murphy (since 9 December 2025), and secretary Alan Mitchell (since 30 January 2024). - Source: https://find-and-update.company-information.service.gov.uk/company/03396854/officers - Checked: 2026-09-19 - Actica Consulting is listed on the NCSC register as an NCSC-assured cyber security consultancy for Risk Management and Security Architecture, and separately for the Cyber Resilience Audit scheme. - Source: https://www.ncsc.gov.uk/organisation/actica-consulting - Checked: 2026-09-19 - Actica's own cyber-security service page describes security architecture work using SABSA methodology, risk assessment against ISO27005/NIST/Octave, GovAssure and Cyber Resilience Audits, SOC2 and ISO27001 audits, and ISO27001/ISMS implementation support. - Source: https://actica.co.uk/services/cyber-security - Checked: 2026-09-19 - Actica's published G-Cloud (Digital Marketplace) listing states ISO/IEC 27001 certification by BSI dated 18 January 2023, ISO 14001:2015 certification, Cyber Essentials and Cyber Essentials Plus achieved, and a day-rate range of £300 to £1,430 per consultant per day. - Source: https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/279870356739657 - Checked: 2026-09-19 - Actica's own privacy/terms page names Joseph Bennett as Data Protection Officer and states data is processed for Actica's or a third party's legitimate interest, with time-sensitive special-category data anonymised in bids/surveys; it contains no statement on how Actica itself uses AI internally or professional indemnity insurance. - Source: https://actica.co.uk/terms - Checked: 2026-09-19 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - NCSC-assured cyber security consultancy for both Risk Management and Security Architecture, confirmed directly on the NCSC register. - ISO/IEC 27001 certified by BSI (18 Jan 2023) and holds Cyber Essentials Plus, published on its own G-Cloud listing. - G-Cloud listing discloses named professional credential types held by its consultants (Chartered Cyber Security Professional, NCSC Certified Cyber Professional, CISSP). - Published, itemised day-rate card (£300-£1,430/day) via the G-Cloud Digital Marketplace, giving buyers an upfront, firm-published pricing reference. - A specific, service-page-documented cyber-assurance practice (SABSA architecture, ISO27005/NIST/Octave risk work, GovAssure and Cyber Resilience Audits, ISO27001/ISMS implementation) rather than a generic listing. ## Things to check Each one carries the factual basis it rests on. - No professional indemnity insurance figure or policy is published anywhere on Actica's own website (terms/privacy notice) or its G-Cloud listings reviewed. - Basis: Actica's terms/privacy notice (actica.co.uk/terms) and the G-Cloud service listing contain no professional indemnity insurance disclosure. - Actica does not publicly disclose how it itself uses AI internally or where client data goes when processed by AI tools. - Basis: Actica's own privacy notice at actica.co.uk/terms sets out data-sharing purposes but makes no statement about the firm's internal AI tool use or data flows. - No individually named cyber-assurance practice lead, and no case study with a quantified client outcome, appears on Actica's public cyber-security service page. - Basis: actica.co.uk/services/cyber-security and actica.co.uk/about-us list service lines and values but name no individual consultant or outcome metric. - Actica has been privately-equity owned by Sovereign Capital Partners since a 2022 management buyout, and in 2024 acquired Gemba Advantage, described by the investor as a software and data engineering business. - Basis: Sovereign Capital Partners' own portfolio page states the 2022 MBO and the October 2024 acquisition of software/data-engineering firm Gemba Advantage. ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Which data protection, AI governance and cyber security providers publish a price?](https://theassurancedesk.com/lists/providers-that-publish-a-price) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.