# AMSA InfoSec Ltd - **Type:** Advisory firm - **Website:** https://amsa-infosec.com/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK cyber-security consultancy assured by the NCSC for risk management. It sells cloud security architecture work to public-sector buyers through G-Cloud. ## AMSA InfoSec scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 1/5 No incident-response, breach-support or regulatory-defence work is described or evidenced on the firm's site, NCSC listing or G-Cloud entries checked. ### Qualifications of the people who do the work: 3/5 NCSC-assured Risk Management consultancy status plus a named contact whose G-Cloud listings claim SABSA, TOGAF, CISSP and NCSC CCP credentials. ### What it publishes about fees: 3/5 Publishes an £850 to £1,450 per-day rate on two G-Cloud listings, but discloses no fee structure for work outside that framework. ### Knowledge of your sector: 3/5 G-Cloud listings claim government, policing and Developed-Vetting-cleared staff, naming a real contact, but no case study confirms delivery. ### Independence from what it sells: 2/5 The firm is itself a Cyber Essentials and IASME Certification Body while also selling consultancy toward those same certifications, a disclosed structural overlap. ### Who carries the risk if the advice is wrong: 1/5 No professional indemnity insurance or other liability commitment is disclosed on any page of the firm's website that was checked. ## Sources for AMSA InfoSec Every line carries the page it was read on and the date it was checked. - AMSA InfoSec Ltd is an active UK private limited company, incorporated 17 July 2014, company number 09134665, SIC 62020 (IT consultancy), registered office Icentrum, Holt Street, Birmingham B7 4BP. - Source: https://find-and-update.company-information.service.gov.uk/company/09134665 - Checked: 2026-09-19 - AMSA InfoSec Ltd holds NCSC assurance as a Cyber Security Consultancy in the Risk Management category. - Source: https://www.ncsc.gov.uk/organisation/amsa-infosec-ltd/about-amsa - Checked: 2026-09-19 - AMSA InfoSec publishes a day rate of £850.00 to £1,450.00 per unit per day for its Cloud Security Architecture service on the G-Cloud 14 framework, with named contact Abdul Khot. - Source: https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/108511484722071 - Checked: 2026-09-19 - The Companies House officer record shows one active director, Abdul Mutalib Khot, appointed since incorporation on 17 July 2014 and verified, matching the 'Abdul Khot' contact named on AMSA's G-Cloud listings. - Source: https://find-and-update.company-information.service.gov.uk/company/09134665/officers - Checked: 2026-09-19 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - Holds a genuine, register-checkable NCSC assurance as a Cyber Security Consultancy in Risk Management, confirmed directly on the NCSC organisation page. - Names a real, findable practitioner: the G-Cloud contact 'Abdul Khot' matches the sole Companies-House-verified director, Abdul Mutalib Khot, in post since the company's 2014 incorporation. - Publishes an actual day-rate range (£850 to £1,450/day) on its G-Cloud listings, which is more fee transparency than most firms in this space disclose. - Long, stable corporate history (11+ years) with one continuous director and no resignations on record, reducing continuity risk. ## Things to check Each one carries the factual basis it rests on. - Ask for proof of its insurance for advice. We did not find this on the pages we checked. - Basis: Absent from all AMSA InfoSec's own pages checked (amsa-infosec.com) - The firm publishes no client case studies, named client, or outcome evidence anywhere on its site, despite claiming government and private-sector experience. - Basis: Absent from amsa-infosec.com homepage, about and risk-management pages - AMSA InfoSec's own site displays it as both a Cyber Essentials and IASME Cyber Assurance Certification Body and as a consultancy selling engagements toward those same standards. - Basis: Certification-body badges shown on amsa-infosec.com homepage ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Which data protection, AI governance and cyber security providers publish a price?](https://theassurancedesk.com/lists/providers-that-publish-a-price) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.