About Data Security People

We believe good security is a business enabler. It makes your organisation faster, more agile, protects brand value, and reduces operational risk in a competitive digital world.

Our practice

Data Security People is a UK-based information security consultancy and PCI DSS QSA Company, with clients including FTSE 100 and FTSE 250 companies, in addition to organisations that operate critical national infrastructure.

We offer assessment and assurance services that are designed to benchmark, improve and maintain a robust security posture. Our work helps to protect our clients’ brand value, commercial reputation, and critical information assets. We are engaged throughout Europe and have significant experience within large enterprise compliance programmes.

Our security consultants take great pride in creating fit-for-purpose and defensible security programmes that meet the individual needs of our clients’ businesses. We do not offer an off-the-shelf security product, nor do we provide silver bullets. Instead, we partner with you to create a tailored package that is delivered by qualified consultants and assessors, with a focus on exceptional quality and service.

Crucially, we believe that rationalised information assurance strategies – driven by evidence and data rather than hyperbole and fear – are the best way to improve our clients’ security capabilities.

In addition to our delivery work, we frequently publish security articles, white papers, and case studies, as well as producing written evidence for research programmes and formal inquiries.

This combination of real-world projects, and sustained academic outreach gives our team unrivalled experience in the theory and application of modern and fit-for-purpose security controls.

We are proud to work with some amazing brands, including:

Our certifications

We maintain a number of accreditations and certifications that provide you with assurance that all of our teams – from sales to delivery – are adhering to the strict standards that we, our regulators, and our clients expect us to meet.


We have been appointed as a Qualified Security Assessor by the Payment Card Industry Security Standards Council, authorised to conduct formal assessment and validation activities on behalf of American Express, Discover, JCB, MasterCard, and Visa.

View our registration

G-Cloud Supplier

Our services, delivered by NCSC Certified Professionals, are authorised for purchase via the Crown Commercial Service G-Cloud programme. Our team regularly works across the public sector, on systems handling OFFICIAL to above SECRET.

View our listing

Cyber Essentials Plus

An independent certification body has assessed our cyber security posture, according to the NCSC Cyber Essentials Framework and awarded us the Cyber Essentials Plus certification.

View our certificate

Armed Forces Covenant

We have committed ourselves to honouring the UK Armed Forces Covenant and to support the Armed Forces Community. We recognise the value Serving Personnel, both Regular and Reservists, Veterans and military families contribute to our business and our country.

View our commitment