Oxford Infosec

Oxford Infosec is a cyber security, privacy, and compliance consultancy for startups and SMEs. We help growing businesses put in place just enough security to satisfy customers, investors, and auditors, without the cost of controls they don't need.

Our core services cover cyber security (Security Foundations, Cyber Essentials, and fractional CISO), privacy (UK GDPR, outsourced DPO, and ISO 27701), compliance (ISO 27001, ISO 42001 and AI governance, SOC 2, and PCI DSS), and due diligence readiness for deals and investment.

What sets us apart is who does the work. Our consultants are practising CISOs, named DPOs, and ISO 27001 lead auditors, and the person who scopes an engagement is the person who delivers it. We recommend controls because they address a real risk to your business, we'll tell you when the answer is "not yet", and we price on complexity rather than headcount.