Our accreditations and certifications

Qualified Security Assessor (QSA) companies are independent security organisations that have been qualified by the PCI Security Standards Council to validate an entity’s adherence to PCI DSS. QSA Employees are individuals who are employed by a QSA Company and have satisfied and continue to satisfy all QSA Requirements.

Our ISO 27001 certification demonstrates our commitment to good information security practices. We help other organisations achieve their certification; find out how we can help you achieve yours.

PGI is an ISO 9001 certified company committed to maintaining and improving the quality of our services.

PGI is an official UK Cyber Essentials and Cyber Essentials Plus certifying body. The Cyber Essentials Scheme was launched by the UK Government in 2014 in order to encourage organisations to adhere to good practice in information security and internet safety. 

PGI offers support and guidance on the online Cyber Essentials certification, as well as consultancy and technical advice on the Cyber Essentials Plus certification obtained after a more complex process of external and internal independent testing.  Find out more.

PGI is an National Cyber Security Centre Assured Service Provider for Cyber Incident Exercising (CIE). 

"All CIE Assured Service Providers have been assured by the NCSC and are considered capable of providing high quality cyber incident exercising services to a defined standard."

For more information about how we can help you with cyber incident exercising in your organisation, please click here.

PGI is currently certified as a Level 1 Certification Body for the Defence Cyber Certification. The certification framework was developed by the UK MOD and IASME to enhance the cyber resilience of the UK’s defence sector supply chain.

IASME Certification Bodies are specially trained companies licensed and assured to offer assessment and certification. As a Certification Body, PGI has shown we meet both security and quality requirements needed to support other organisations to become certified against the DCC.

The CREST accreditation provides a clear indication of the quality of the organisation and the technical capability of staff they have access to, including:

• Access to trusted service organisations utilising highly skilled, knowledgeable and competent individuals
• Procurement support
• Industry benchmarks
• Rigorous application process for added assurance

 All CREST member companies have submitted policies, processes and procedures relating to their service provision to CREST providing added assurance for buyers.  These policies, processes and procedures have been assessed by CREST and have been deemed fit for purpose.

Offensive Security provides hands-on security programs involving some of the most rigorous exams in the industry. PGI’s security team includes Certified Professionals (OSCP). This performance-based certification demonstrates the clear, consistent and practical skillsets of our ethical hackers.