# Amethyst Risk Management Limited - **Type:** Advisory firm - **Website:** https://amethystrisk.com/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK cyber-security consultancy listed by the NCSC for audit and review, risk management and cyber resilience audits. It also offers ISO/IEC 27001 support and CISO-as-a-Service. ## Amethyst Risk Management scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 No published incident-response or regulatory-defence case studies were found on the firm's site or in search; only generic audit and compliance service descriptions were located. ### Qualifications of the people who do the work: 4/5 NCSC's own register independently lists the firm under two assurance schemes, and the firm publishes ISO 9001, ISO/IEC 27001 and Cyber Essentials Plus claims. ### What it publishes about fees: 2/5 No rates or pricing are published on the firm's site or its G-Cloud listing; the NCSC scheme page confirms cost is privately negotiated. ### Knowledge of your sector: 4/5 Two NCSC-assured schemes plus 18 years trading and named directors with stated cyber-security and defence-sector experience support specialism. ### Independence from what it sells: 4/5 Services described are consultancy and audit led rather than tied to reselling one product, though a Microsoft Partner badge was noted on site. ### Who carries the risk if the advice is wrong: 2/5 No professional indemnity insurance, warranty or liability commitment is disclosed on any firm-published page reviewed. ## Sources for Amethyst Risk Management Every line carries the page it was read on and the date it was checked. - Company status at Companies House - Source: https://find-and-update.company-information.service.gov.uk/company/06240100 - Checked: 2026-09-19 - Incorporation date - Source: https://find-and-update.company-information.service.gov.uk/company/06240100 - Checked: 2026-09-19 - NCSC Assured Cyber Security Consultancy listing - Source: https://www.ncsc.gov.uk/organisation/amethyst-risk-management - Checked: 2026-09-19 - NCSC Cyber Resilience Audit (CRA) scheme certification - Source: https://www.ncsc.gov.uk/organisation/amethyst-risk-management/cyber-resilience-audit - Checked: 2026-09-19 - Most recent accounts filed at Companies House - Source: https://find-and-update.company-information.service.gov.uk/company/06240100/filing-history - Checked: 2026-09-19 - Certifications the firm publishes about itself - Source: https://amethystrisk.com/ - Checked: 2026-09-19 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - Independently listed on NCSC's own register under two live assurance schemes (Assured Cyber Security Consultancy, and the Cyber Resilience Audit scheme), not just a self-published claim. - Publishes ISO 9001, ISO/IEC 27001 and Cyber Essentials Plus certification claims, with all staff said to hold government security clearance. - 18+ years of continuous trading (incorporated May 2007) with the founder, Stephen Howe, still an active director and company secretary. - Named senior team (Stephen Howe, Karina Green, Georgina Amron-Coetzee, Ross Thomson) with stated long tenure and relevant professional/technical credentials. ## Things to check Each one carries the factual basis it rests on. - No day rates or pricing are published anywhere found; the NCSC's own Cyber Resilience Audit page states cost is agreed privately between buyer and provider. - Basis: NCSC CRA scheme page states: "You agree the cost of the service with the service provider." - No professional indemnity insurance or liability disclosure appears on any of the firm's own website pages reviewed. - Basis: Absence of any PI insurance or liability statement on amethystrisk.com About, Services and Insights pages checked. - The firm files total exemption full accounts at Companies House, so no turnover, profit or balance-sheet detail is publicly available. - Basis: Companies House filing history record: "Total exemption full accounts made up to 31 May 2025." ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.