Oxford Infosec is a UK cyber security and compliance consultancy for small businesses, typically five to two hundred people, facing harder questions from customers, investors, or regulators. We cover Security Foundations, ISO 27001, GDPR and DPO, vCISO, Cyber Essentials, SOC 2, and ISO 42001. We recommend only what's proportionate to your size and stage, not the largest programme we can sell. We advise and maintain; we don't run a 24-7 SOC or do penetration testing. If you don't need us yet, we'll tell you.