NIS Assurance Model Consultancy for the Information Commissioner's Office

The Commissioner is the Competent Authority for Relevant Digital Service Providers (RDSPs) under NIS; and the Commissioner's Cyber Team is expanding the scope of its work under the current NIS regulations and in anticipation of any potential changes to the legislation.

The Commissioner wishes to procure services from a partner with deep knowledge and experience of the digital economy and cybersecurity who can assist in: - Building out a robust risk prioritised RDSP register; - Create a suitable Cyber Assurance Framework (CAF) which will work within the wider NIS cybersecurity assurance model and all associated processes, guidance and tooling; - Pilot the overall cybersecurity assurance model within a small community of RDSP organisations; - Adapt and update the assurance model based on pilot results.