Compliance audit firms in the United Kingdom

60 Verified firms with an office in United Kingdom · Verified first · All auditors

These firms have a published office in United Kingdom. A firm may also have offices elsewhere. Listings are checked facts, not endorsements or rankings.

1 Cyber Valley

HQ: United KingdomVerified

PCI DSS

Cybersecurity consultancy offering PCI DSS QSA assessments, PCI PIN advisory and managed security services (London address from its contact page); listed by the PCI SSC as a Qualified Security Assessor company.

London, England

2|SEC

HQ: United KingdomVerified

PCI DSS

London-based cybersecurity consultancy (2-sec Limited) offering penetration testing and PCI DSS services; listed as a PCI QSA.

London, England

3core2 Certification

HQ: United KingdomVerified

ISO 27001

Management systems certification body in Warrington offering remote and onsite audits; UKAS-accredited for ISO/IEC 27001 certification.

Warrington, England

AFNOR UK

HQ: United KingdomVerified

ISO 27001

UK certification body of the French AFNOR group (Swindon address on its site and UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.

Swindon, England

Altus Certification

HQ: United KingdomVerified

ISO 27001

UK management systems certification body (Cannock address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.

Cannock, England

AMR CyberSecurity

HQ: United KingdomVerified

PCI DSS

Cybersecurity firm registered in Whiteley, Hampshire (AMR CyberSecurity Ltd); listed as a PCI QSA.

Whiteley, England

Approachable Certification

HQ: United KingdomVerified

ISO 27001ISO 27701

Management systems certification body in Denton, Greater Manchester (UKAS schedule address); UKAS-accredited for ISO/IEC 27001 and ISO/IEC 27701 certification.

Denton, England

Atlas Certification

HQ: United KingdomVerified

ISO 27001

London-based certification body (Atlas Certification Limited); UKAS-accredited for ISO/IEC 27001 certification.

London, England

AUVA Certification

HQ: United KingdomVerified

ISO 27001

Management systems certification body (Witham, Essex address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.

Witham, England

BSI

HQ: United KingdomVerified

ISO 27001ISO 27701ISO 42001

UK national standards body and certification body (UKAS schedule address: Milton Keynes); UKAS- and ANAB-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.

Milton Keynes, England

BT

HQ: United KingdomVerified

PCI DSS

UK telecommunications and IT services company (London address from business.bt.com); listed by the PCI SSC as a Qualified Security Assessor company.

London, England

Bureau Veritas UK

HQ: United KingdomVerified

ISO 27001ISO 27701

UK branch of the Bureau Veritas certification business (London); UKAS-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO 22301 certification.

London, England

Capgemini UK

HQ: United KingdomVerified

PCI DSS

UK business of the Capgemini consulting and technology services group (London office from its UK contact page); Capgemini UK Plc is listed by the PCI SSC as a Qualified Security Assessor company.

London, England

CFE Certification

HQ: United KingdomVerified

ISO 27001

Certification and training body established in London in 2015; UKAS-accredited for ISO/IEC 27001 certification.

London, England

Data Protection People

HQ: United KingdomVerified

PCI DSS

Data protection and cyber security consultancy based in Leeds; listed by the PCI SSC as a Qualified Security Assessor company.

Leeds, England

DNV UK

HQ: United KingdomVerified

ISO 27001ISO 27701

UK certification entity of DNV (DNV Business Assurance UK Limited, London); UKAS-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO 22301 certification.

London, England

eCOGRA

HQ: United KingdomVerified

ISO 27001

Testing and certification organisation focused on online gambling products (London address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.

London, England

Endava

HQ: United KingdomVerified

PCI DSS

Technology services and software engineering company (London office from its contact page); its UK entity is listed by the PCI SSC as a Qualified Security Assessor company.

London, England

ForeFront Certification

HQ: United KingdomVerified

ISO 27001

Management systems certification body near Birmingham (Bromsgrove address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.

Bromsgrove, England

Foregenix

HQ: United KingdomVerified

PCI DSS

Payment and cybersecurity firm headquartered near Swindon, England; listed as a PCI QSA.

Swindon, England

I.S. Partners

HQ: United StatesVerified

ISO 27001HITRUSTCMMC

Compliance audit firm based in Dresher, Pennsylvania with a London office; listed as an ANAB-accredited ISO 27001 certification body, HITRUST External Assessor and CMMC C3PAO.

Dresher, Pennsylvania · London, England

Integrity360

HQ: IrelandVerified

PCI DSS

Dublin-headquartered cybersecurity services firm listed as a PCI Qualified Security Assessor (QSA) company, with a London office.

Dublin, Dublin · London, England

Intertek

HQ: United KingdomVerified

ISO 27001

Assurance, testing and certification group; its UK certification entity (Intertek Certification Ltd, Derby) is UKAS-accredited for ISO/IEC 27001.

Derby, England

ISOQAR

HQ: United KingdomVerified

ISO 27001ISO 42001

UK certification body with a Cardiff head office (per its site); UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.

Cardiff, Wales · Manchester, England

LRQA

HQ: United KingdomVerified

ISO 27001ISO 42001

Birmingham-based assurance and certification body; UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 management system certification.

Birmingham, England

NCC Group

HQ: United KingdomVerified

PCI DSSHITRUSTFedRAMPGovRAMP

Manchester-headquartered cybersecurity company listed as a PCI QSA, HITRUST External Assessor and (via its US entity) FedRAMP-recognized assessor.

Manchester, England

NQA

HQ: United KingdomVerified

ISO 27001ISO 42001

Certification body based in Dunstable, England; UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.

Dunstable, England

PricewaterhouseCoopers LLP (PwC UK)

HQ: United KingdomVerified

PCI DSS

UK member firm of the PwC network with a London office at Embankment Place; listed by the PCI Security Standards Council as a Qualified Security Assessor company.

London, England

PRISM Infosec

HQ: United KingdomVerified

PCI DSS

Cybersecurity consultancy (Prism Infosec Ltd, registered office Cheltenham per Companies House); listed as a PCI QSA.

Cheltenham, England

ProCheckUp

HQ: United KingdomVerified

PCI DSS

Portsmouth-based information security firm (ProCheckUp Limited); listed as a PCI QSA.

Portsmouth, England

RA Cert

HQ: United KingdomVerified

ISO 27001

London-based certification body; UKAS-accredited for ISO/IEC 27001 certification.

London, England

RedSecLabs

HQ: United KingdomVerified

PCI DSS

London-based cybersecurity consultancy offering penetration testing and PCI DSS assessment; listed by the PCI SSC as a Qualified Security Assessor company.

London, England

Securious

HQ: United KingdomVerified

PCI DSS

Exeter-based information security consultancy; listed as a PCI QSA.

Exeter, England

SGS UK

HQ: United KingdomVerified

ISO 27001ISO 27701

UK entity of the SGS testing, inspection and certification group (SGS United Kingdom Limited, Ellesmere Port); UKAS-accredited for ISO/IEC 27001, ISO/IEC 27701 and ISO 22301 certification.

Ellesmere Port, England

SOCOTEC Certification UK

HQ: United KingdomVerified

ISO 27001

Bicester-based certification body (Socotec Certification United Kingdom Limited); UKAS-accredited for ISO/IEC 27001 certification.

Bicester, England

Sovereign Secure

HQ: United KingdomVerified

PCI DSS

Security and compliance firm established in 2012 offering PCI DSS assessment, security testing and ISO 27001 services; UK office in Accrington per its contact page; listed by the PCI SSC as a Qualified Security Assessor company.

Accrington, England

Teamwork IMS

HQ: United KingdomVerified

PCI DSS

Management systems and information security consultancy with offices in Reading and Leeds (per its site); listed as a PCI QSA.

Reading, England · Leeds, England

Tempo Audits

HQ: United KingdomVerified

ISO 27001

Audit body focused on ISO 27001 certification for technology companies (Bristol address from the UKAS schedule); UKAS-accredited for ISO/IEC 27001 certification.

Bristol, England

TÜV UK

HQ: United KingdomVerified

ISO 27001ISO 42001

UK certification body of the TÜV NORD group (Croydon address on its site); UKAS-accredited for ISO/IEC 27001 and ISO/IEC 42001 certification.

Croydon, England

URM Consulting

HQ: United KingdomVerified

PCI DSS

Reading-based governance, risk and compliance consultancy (URM Consulting Services Ltd); listed as a PCI QSA.

Reading, England

Xcina Consulting

HQ: United KingdomVerified

PCI DSS

London-based consultancy (consulting arm of Brookcourt Solutions Limited per its site); listed as a PCI QSA.

London, England

Related locations: England, United Kingdom · London, England · Manchester, England · Leeds, England · Reading, England · Warrington, England

FAQ

How many audit firms are listed in the United Kingdom?

60 Verified firms have a published office in United Kingdom. Pages exist only where at least 3 Verified firms match. This is not a ranking.

Which registry listings do you check?

Firms on this page appear because an official registry listed them for at least one published framework (ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS). Each firm page names the registry row and the date checked.

Which cities in the United Kingdom have the most listed firms?

London (23), Manchester (7), Leeds (3), Reading (3), Warrington (3), Bristol (2).

How do I get matched with a listed firm?

Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement, and we do not email firms automatically. Get matched.

See the listing method. Pages exist only where at least 3 Verified firms have an office.

Get matched with verified auditors

We'll review your request; no automatic emails. Introductions start later. This does not send a message to any firm and does not include prices. Not a ranking.

Framework(s) (select all that apply)