Cookie Consent by Free Privacy Policy Generator

IASME Cyber Assurance (ICA)

A practical, flexible path to information security certification.

What is IASME Cyber Assurance (ICA)?

IASME Cyber Assurance is a recognised information security standard that helps businesses demonstrate strong, responsible security practices. Owned and operated by IASME, the scheme offers two levels of certification: Level 1 is a verified self-assessment, and Level 2 is a full audit by a qualified assessor.

It is designed to support small and medium-sized businesses that need to show supply chain assurance, meet regulatory expectations or build customer trust. The standard covers key areas such as risk management, leadership involvement, and ongoing security controls, providing a solid foundation for long-term security maturity.

IASME Cyber Assurance is also recognised as a realistic alternative to ISO 27001 for many organisations. It supports businesses in regulated sectors and helps meet requirements such as DORA (Digital Operational Resilience Act) in financial services.

3,000+
UK businesses certified to IASME Cyber Assurance since its launch.
IASME Consortium
92%
of SMEs say demonstrating supply chain security is essential to winning business.
UK Government Cyber Security Breaches Survey
ICA
is recognised by key industry bodies as an effective alternative to ISO 27001 for small businesses.
NCSC supplier assurance guidance
Why is IASME Cyber Assurance Important?

Certification to IASME Cyber Assurance helps organisations reduce risk, build trust and mature their security practices. It supports a broader view of information security than many entry-level schemes and gives a clear structure for ongoing improvement.

Reduce Risk and Strengthen Governance

Identify vulnerabilities across your organisation and implement security controls that reduce the likelihood of attacks. Embed risk management and board-level oversight into your security programme for long-term resilience.

Achieve Assurance Without Complexity

Level 1 self-assessment and Level 2 audit options allow businesses to choose the right path for their size and maturity. Demonstrate independent validation of your security management system to regulators, partners and clients.

Meet Supply Chain and Regulatory Expectations

Accepted as an alternative to ISO 27001 in many supply chains and recognised by regulators including for DORA compliance. Annual certification reinforces your commitment to continuous improvement and proactive cybersecurity management.

How Secarma Delivers Value
Experienced Assessors
Our IASME-certified auditors also hold ISO 27001:2022 Lead Auditor qualifications, bringing deep experience and industry credibility to every assessment.
Clear, No-Jargon Guidance
We speak your language. Secarma avoids technical jargon and focuses on clarity so your team can engage with security issues confidently.
Supportive Every Step of the Way
We believe in building a safer world by helping businesses succeed. Our assessors provide detailed guidance, helpful insights and practical next steps to make certification achievable and effective.
Resources
Stay up to date with expert-written blogs, security labs, downloadable guides and more, all designed to support your journey.
Cyber Essentials - Whats in Scope Infographic
Cyber Essentials Made Easy Pack
Get in touch
See how we’ve helped hundreds of businesses to improve their cyber security and regain their calm.
News and blog posts
Retailers like M&S and Co-op have recently been targeted by ransomware...
  IoT devices (Internet of Things) have changed how we live and work...
In today’s business world, the ever-increasing emerging ransomware threats pose...
Welcome to Tuesday's tech news roundup – this is the place where we keep you up...