Skip to content

Experience

Where the practice has actually worked

Ten years across regulated, high-compliance and public sector environments. Sectors named, clients not - unless they have said we may.

In short

Cloudgap has delivered security and governance engagements since 2015 across financial services, central government, defence supply chain, retail, media, healthtech, logistics and education technology. The practice works with senior stakeholders on certification, AI governance, fractional security leadership and supply chain assurance.

Sectors

Ten sectors, and what they have in common

Each of these is an environment where getting security wrong has a consequence beyond embarrassment - a regulator, a contract, a safety case or a person affected by a decision.

  • Financial services and payments
  • Central government and public sector
  • Defence supply chain
  • Retail and consumer goods
  • Media and broadcast
  • Healthtech and life sciences
  • Logistics and critical national infrastructure
  • Education technology
  • Manufacturing
  • Facilities management

Pending verification

What we hold, and what is still being checked

Certifications and partner status are published below. The awards and the delivery-scale figure that appear on the current site are not, because they do not yet have a source against them - and a firm that sells compliance is the last one that should carry an unevidenced credential.

  • Cyber Essentials

    The UK government-backed baseline, assessed against the five technical controls.

  • Google Cloud Partner

    Partner status held through the Google Cloud partner programme.

[Client input required · Q4]

Still outstanding after the 28 Aug 2026 review. (1) The three named awards - 'client innovation partner of the year', 'regional delivery partner of the year', 'impactful leadership annual awards' - awarding body and year for each. (2) 'Customer transactions in excess of £1billion+ revenue' - what this measures and over what period. (3) Certificate references for Cyber Essentials and Google Cloud Partner, so both can carry a public registry link rather than being asserted. Confirmed and now published: Cyber Essentials, Google Cloud Partner.

Values

Six words, and what each one costs us

  • Integrity

    We say what we found, including when it is inconvenient and including when it reflects on us.

  • Promise

    A date we give is a date we have worked out we can hit, not a date that closed the conversation.

  • Sustainability

    Remote-first by default, and engagements scoped to what is needed rather than to what fills a retainer.

  • Trust

    Most of our work comes from people we have worked with before, or from people they told.

  • Passion

    This is a field where standing still is a real risk, so curiosity is a job requirement rather than a nice-to-have.

  • People

    Fractional leadership is a people business. If the team is not looked after, the client feels it within a quarter.

Since 2015

  1. 2015Founded in London
  2. 2018The vCISO pivot
  3. 2021Agile delivery replaces the report
  4. 2023AI governance practice
  5. 2025Supply chain and resilience

Start

Three ways in, depending on how close the deadline is.

Or just email a human: hello@cloudgap.ai

We reply within24 hours