# RightCue Consulting Services Ltd - **Type:** Advisory firm - **Website:** https://rightcue.com/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK cyber-security consultancy, founded in 2009 by two former PwC colleagues, offering ISO 27001 help, Cyber Essentials preparation and virtual-CISO services for smaller firms. ## RightCue Consulting Services scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 3/5 NCSC lists RightCue as an Assured Service Provider for Cyber Incident Exercising, but no independently verifiable case of live regulatory-defence or breach-response work was found in public sources. ### Qualifications of the people who do the work: 4/5 Firm's own site and NCSC confirm CREST accreditation (2023), IASME Cyber Essentials CB status since 2014, ISO 27001 certification (2020) and DCC CB status (2025). ### What it publishes about fees: 2/5 No fee rates, ranges or pricing structure are published on any service page; all pricing requires direct enquiry, per rightcue.com. ### Knowledge of your sector: 4/5 Named, dated case studies span defence, finance, healthcare/pharma and legal clients, including a named CIO testimonial for the vCISO service. ### Independence from what it sells: 3/5 Firm is both an IASME/DCC certification body and a paid consultancy preparing clients for those same certifications, a structural dual role disclosed on its own site. ### Who carries the risk if the advice is wrong: 2/5 No professional indemnity insurance cover, limit or liability commitment is disclosed on the firm's website, privacy notice or Companies House filings reviewed. ## Sources for RightCue Consulting Services Every line carries the page it was read on and the date it was checked. - RightCue Consulting Services Ltd is registered at Companies House under number 06866953, status Active, incorporated 1 April 2009 (previously named Right Cue Consulting Services Limited, and before that Svyam Limited). - Source: https://find-and-update.company-information.service.gov.uk/company/06866953 - Checked: 2026-09-19 - NCSC lists RightCue Consulting Services Ltd as an Assured Service Provider for Cyber Incident Exercising and as an NCSC-approved Cyber Advisor providing guidance to UK SMEs. - Source: https://www.ncsc.gov.uk/organisation/right-cue-consulting-services-ltd/about-right-cue - Checked: 2026-09-19 - RightCue's own site states it became a Cyber Essentials certification body via the IASME Consortium in 2014, and was founded in 2009 by ex-PwC colleagues Yogesh Agarwal and Sonal Agarwal. - Source: https://rightcue.com/about/ - Checked: 2026-09-19 - Companies House records both Sonal Agarwal (appointed 25 May 2009) and Yogesh Agarwal (appointed 1 April 2009) as the company's current, active directors. - Source: https://find-and-update.company-information.service.gov.uk/company/06866953/officers - Checked: 2026-09-19 - RightCue's privacy notice states 'We do not use automated decision-making in relation to your personal data' and contains no statement about the firm's own use of AI tools in service delivery. - Source: https://rightcue.com/privacy-notice/ - Checked: 2026-09-19 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Published - How it uses AI: Not published ## Strengths - NCSC Assured Service Provider status for Cyber Incident Exercising, plus NCSC-approved Cyber Advisor status for SMEs. - IASME Cyber Essentials certification body since 2014 (per the firm's own site), one of the scheme's earlier-approved bodies. - CREST-accredited for penetration testing and ISO 27001 certified, with named founder-directors (ex-PwC) in place since 2009. - Named, dated case studies across defence, finance, healthcare/pharma and legal clients, including a named client contact (Nurture Group CIO Eoin O'Connell) for the vCISO service. ## Things to check Each one carries the factual basis it rests on. - No fee rates, ranges or pricing model are published anywhere on the firm's website; every service page routes enquirers to a direct 'talk to us' contact form. - Basis: Checked rightcue.com/it-audit/ and rightcue.com/virtual-ciso/; neither page contains any pricing or fee-structure text. - No professional indemnity insurance cover, limit or provider is disclosed on the firm's website or in its privacy notice. - Basis: Reviewed rightcue.com/about/ and rightcue.com/privacy-notice/; neither mentions PI insurance. - Individual consultant credentials are described only collectively (e.g. 'Chartered Cyber Security Professionals'), with no named individual qualifications or membership numbers published. - Basis: rightcue.com/about/ names only the two director-founders; no other named, credentialed consultants appear on the site. ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [After a cyber attack: what to report, and to whom](https://theassurancedesk.com/best/security-incident) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.