Assize Data

Cyber Resilience Pledge

Last updated

Assize Data Ltd has signed the government’s Cyber Resilience Pledge, run by the Department for Science, Innovation and Technology and the Department for Culture, Media and Sport. As the pledge asks, we publish our signed declaration here, and we will publish an update each year on what we have done to meet it.

Assize Data Ltd has one director, who acts as the board for the actions below.

Our declaration

Following the government’s ministerial letter of 13 October 2025, Assize Data Ltd hereby pledge to undertake the following actions, as outlined in the letter:

  1. Make cyber a Board responsibility
    1. Implement all actions within the Cyber Governance Code of Practice.
    2. Ensure all board members undertake the NCSC’s Cyber Governance Training within 3 months and then on an annual basis.
  2. Sign up to Early Warning
    1. Register for the Early Warning service within one month of signing the pledge.
  3. Require Cyber Essentials across supply chains
    1. Register to the Cyber Essentials Supplier Check Tool within 2 months of signing the pledge.
    2. Ensure that a comprehensive audit of Cyber Essentials coverage has been conducted across our entire supply chain and that it is presented to and discussed by the Board.
    3. Take a risk-based approach to requiring Cyber Essentials across our supply chain (which may include requiring it from all suppliers). If Cyber Essentials is not required for certain suppliers, the board will ensure that this decision aligns with our organisations risk appetite and strategy and that adequate assurance is obtained through other means.

In addition to the above 3 actions, we commit to take the following steps:

  • Encourage these actions within our own supply chains: we will strive to engage with our suppliers to understand and better manage the cyber security risks that they are exposed to through their supply chain and encourage adoption of the above measures.
  • Publish the signed pledge declaration on our website: within 2 months, we will publish the signed pledge declaration on our company website. Additionally, we will publish an annual public update, either in our annual report or on our company website, on the steps taken to deliver against the pledge.

While the pledge is voluntary, we commit to take positive and meaningful steps to fully implement the 3 actions. If our company has been unable to implement any of the pledge actions, we will promptly provide DCMS with relevant feedback as to why.

Signed,
Rose Traviss, Director, Assize Data Ltd

Our timetable

The pledge’s deadlines, counted from the date we signed:

  • Register for the NCSC’s Early Warning service: by 16 November 2026
  • Publish this declaration: done on 16 October 2026
  • Register for the Cyber Essentials Supplier Check Tool: by 16 December 2026
  • Complete the NCSC’s Cyber Governance Training: by 16 January 2027, then every year
  • Publish our first annual update, on this page: by 16 October 2027

How we look after information day to day is on our security and data handling page.

The declaration text is the government’s, from GOV.UK. It is Crown copyright and used under the Open Government Licence v3.0.