We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk

AMSA InfoSec Ltd review

Advisory firm

A UK cyber-security consultancy assured by the NCSC for risk management. It sells cloud security architecture work to public-sector buyers through G-Cloud.

Relevant if you buy through G-Cloud and want a published day rate and a named consultant

Price Published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

AMSA InfoSec scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 1/5
Qualifications of the people who do the work 3/5
What it publishes about fees 3/5
Knowledge of your sector 3/5
Independence from what it sells 2/5
Who carries the risk if the advice is wrong 1/5

What AMSA InfoSec offers, and what it publishes

AMSA InfoSec publishes a day rate: £850.00 to £1,450.00 for cloud security architecture on its G-Cloud listings. Its named contact, Abdul Khot, matches the company's sole director, Abdul Mutalib Khot, in post since 2014. The NCSC register lists it as an assured consultancy for risk management.

AMSA InfoSec does not publish client case studies, named clients or results, though its listings claim government and private-sector work. It does not publish its indemnity cover. It gives no fees for work outside G-Cloud.

AMSA InfoSec's homepage shows it as a Cyber Essentials and IASME certification body, while it also sells consultancy towards those standards. IASME's directory returned an error when we checked, so we could not confirm this independently. Its listings say it uses the SABSA method and that staff hold TOGAF, CISSP and NCSC CCP credentials, with policing and government experience.

Strengths

  • Holds a genuine, register-checkable NCSC assurance as a Cyber Security Consultancy in Risk Management, confirmed directly on the NCSC organisation page.
  • Names a real, findable practitioner: the G-Cloud contact 'Abdul Khot' matches the sole Companies-House-verified director, Abdul Mutalib Khot, in post since the company's 2014 incorporation.
  • Publishes an actual day-rate range (£850 to £1,450/day) on its G-Cloud listings, which is more fee transparency than most firms in this space disclose.
  • Long, stable corporate history (11+ years) with one continuous director and no resignations on record, reducing continuity risk.

Things to check

  • Ask for proof of its insurance for advice. We did not find this on the pages we checked.
  • The firm publishes no client case studies, named client, or outcome evidence anywhere on its site, despite claiming government and private-sector experience.
  • AMSA InfoSec's own site displays it as both a Cyber Essentials and IASME Cyber Assurance Certification Body and as a consultancy selling engagements toward those same standards.

Common questions

Does AMSA InfoSec publish its fees?

Only on G-Cloud. Its cloud security architecture listing gives a day rate of £850.00 to £1,450.00. It publishes no fees for work outside G-Cloud.

Is AMSA InfoSec accredited?

For risk management, yes. The NCSC register lists it as an assured consultancy for risk management, with status Certified. Its homepage also shows Cyber Essentials, IASME and UKAS ISO 27001 and 9001 badges, which we could not check independently.

Does AMSA InfoSec show client case studies?

No. We found no case study, named client or outcome on amsa-infosec.com, though its G-Cloud listings claim government and private-sector experience.

Does AMSA InfoSec disclose indemnity insurance?

No. Its homepage, about, contact and privacy pages say nothing about indemnity cover or liability terms. A missing statement does not prove there is no cover.

Evidence for each AMSA InfoSec score

Show our working

Notes behind each thing to check

  • Ask for proof of its insurance for advice. We did not find this on the pages we checked. (Absent from all AMSA InfoSec's own pages checked (amsa-infosec.com))
  • The firm publishes no client case studies, named client, or outcome evidence anywhere on its site, despite claiming government and private-sector experience. (Absent from amsa-infosec.com homepage, about and risk-management pages)
  • AMSA InfoSec's own site displays it as both a Cyber Essentials and IASME Cyber Assurance Certification Body and as a consultancy selling engagements toward those same standards. (Certification-body badges shown on amsa-infosec.com homepage)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 1/5 No incident-response, breach-support or regulatory-defence work is described or evidenced on the firm's site, NCSC listing or G-Cloud entries checked.
Qualifications of the people who do the work 3/5 NCSC-assured Risk Management consultancy status plus a named contact whose G-Cloud listings claim SABSA, TOGAF, CISSP and NCSC CCP credentials.
What it publishes about fees 3/5 Publishes an £850 to £1,450 per-day rate on two G-Cloud listings, but discloses no fee structure for work outside that framework.
Knowledge of your sector 3/5 G-Cloud listings claim government, policing and Developed-Vetting-cleared staff, naming a real contact, but no case study confirms delivery.
Independence from what it sells 2/5 The firm is itself a Cyber Essentials and IASME Certification Body while also selling consultancy toward those same certifications, a disclosed structural overlap.
Who carries the risk if the advice is wrong 1/5 No professional indemnity insurance or other liability commitment is disclosed on any page of the firm's website that was checked.

Sources for AMSA InfoSec

  • AMSA InfoSec Ltd is an active UK private limited company, incorporated 17 July 2014, company number 09134665, SIC 62020 (IT consultancy), registered office Icentrum, Holt Street, Birmingham B7 4BP. (Active; incorporated 17 July 2014) (Companies House, checked 19 September 2026)
  • AMSA InfoSec Ltd holds NCSC assurance as a Cyber Security Consultancy in the Risk Management category. (NCSC Assured Cyber Security Consultancy, Risk Management, status: Certified) (ncsc.gov.uk, checked 19 September 2026)
  • AMSA InfoSec publishes a day rate of £850.00 to £1,450.00 per unit per day for its Cloud Security Architecture service on the G-Cloud 14 framework, with named contact Abdul Khot. (G-Cloud, checked 19 September 2026)
  • The Companies House officer record shows one active director, Abdul Mutalib Khot, appointed since incorporation on 17 July 2014 and verified, matching the 'Abdul Khot' contact named on AMSA's G-Cloud listings. (Director: Abdul Mutalib Khot, appointed 17 July 2014, verification complete) (Companies House, checked 19 September 2026)

NCSC Assured Cyber Security Consultancy, Risk Management category, status Certified (confirmed on the NCSC organisation register, ncsc.gov.uk, checked 2026-09-19).

Seeking ISO 42001 certificationFirst DPO or AI policy

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.