Our Company

We build genuine partnerships with our clients

Accreditations

CREST

Context is a member of the Council of Registered Ethical Security Testers (CREST).

CREST was created in response to the need for regulated and professional security testers to serve the global information security marketplace. CREST’s main aim is to represent the information security testing industry and offer a demonstrable level of assurance as to the competency of organisations and individuals within those approved companies.

CREST is a standards-based organisation for penetration test suppliers incorporating a best practice technical certification programme for individual consultants. Additionally CREST provides its members with a framework of guidance including standards, methodologies and recommendations aimed at ensuring the very highest standards of leading-edge security testing.

www.crest-approved.org

CHECK

Context is a subscriber to the CESG CHECK Scheme at Green level. The CESG CHECK Scheme is the foundation of a special partnership between the Government and Industry that allows third parties to conduct security tests on Government networks. The scheme sets standards for both the member company and the individual consultant to ensure that the Government client receives a test of the appropriate standard.

Whilst the Scheme was intended for Government use, the public sector noticed the benefits of such a scheme and has often requested that any would-be suppliers are CHECK approved. Obviously a Government led scheme will not be absolutely ideal for the private sector and increasingly the CREST scheme is being adopted as the private sector standard.

Visit the CHECK website

PCI

Context is an Approved Scanning Vendor (ASV) for the PCI Data Security Standard (PCI DSS). We supply scanning and penetration testing services to companies seeking compliance with the PCI DSS, which was developed by the members of the PCI Security Standards Council (including Visa, MasterCard, JCB, Discover Financial Services and American Express) with the aim of applying consistent data security measures to card payment accounts across the globe.

Visit the PCI website

BSI

ISO9001:2008: Context’s Quality Management System (QMS) is certified by BSI to the international standard ISO9001:2008. ISO9001 is a globally recognized standard for the quality management of businesses and is used by Context to measure the effectiveness of all business processes and procedures used to provide quality and consistency in all of our services and products. Our QMS is also used to ensure our products / services continually improve, remain appropriate and continue to meet our clients’ requirements. The scope of our QMS includes all places of business and our certification includes London and Cheltenham, with Dusseldorf and Melbourne to follow is Q3 and Q4 2012 respectively.

ISO27001:2005: Context is certified by BSI with ISO 27001 for both its UK offices, at London and Cheltenham as well as Dusseldorf. ISO27001:2005 is the only auditable, international standard used to specify the requirements of an Information Security Management System (ISMS). It is designed to ensure that companies or organizations select and deploy adequate and proportionate security controls. Its scope includes full assessment of existing security policies and procedures and the establishment of a process for continuous improvement of those policies and procedures.

The scope of our ISMS includes all places of business and our certification includes London, Cheltenham and Dusseldorf, with Melbourne to follow in Q4 2012.

Details of Context’s ISO27001:2005 certificate can be found on the BSI website.

How we can help

We are an independent security consultancy, specialising in both technical security and information assurance services.

Get in touch with us

  

CAT

Our new flagship
tool CAT is perfect
for identifying application
security vulnerabilities.

More about CAT

 

Website Design : Design by Structure.