Terms & Disclaimer

Last updated: October 2026

These terms apply to your use of the Fortify Insight website and any readiness tools or resources made available through it, including the Cyber Essentials Mapper. By using this website you agree to these terms. Services delivered to clients are governed by a separate written agreement or proposal, which takes precedence over these website terms where they differ.

1. General information only

The content on this website is provided for general information and educational purposes. It describes our services and offers an introduction to topics such as Cyber Essentials, ISO 27001, risk assessment and digital safety. It is not tailored to your organisation and should not be relied upon as a substitute for professional advice specific to your circumstances.

Nothing on this website constitutes legal, regulatory, financial or formal certification advice. Where legal or regulatory obligations apply to your organisation (for example under UK GDPR, the Data Protection Act 2018, or sector-specific requirements), you should take appropriate professional advice.

2. Cyber Essentials readiness and certification

Fortify Insight provides readiness support, gap analysis and advisory services. We are not a Cyber Essentials certification body. Formal Cyber Essentials and Cyber Essentials Plus certification is awarded only by certification bodies accredited under the IASME Consortium on behalf of the National Cyber Security Centre (NCSC).

Any readiness score, gap list or recommendation produced by the Cyber Essentials Mapper, or provided during a review, is an indication of how your described controls compare with the scheme's published requirements at the time. It does not guarantee that you will achieve certification, and it does not replace the official self-assessment questionnaire or any technical verification required for Cyber Essentials Plus. Certification outcomes depend on the information you submit, the assessor's judgement, and the current version of the scheme requirements.

3. Nature and limits of security assessments

Cybersecurity is an evolving field and no assessment can be exhaustive. Our reviews, readiness checks and the Cyber Essentials Mapper rely substantially on the information you provide and on the scope agreed at the time. Fortify Insight does not warrant that every security risk, vulnerability or weakness will be identified, and we cannot guarantee that your systems will be free from compromise, data loss or disruption as a result of following our guidance.

Responsibility for implementing, testing and maintaining security controls, and for deciding how to act on our recommendations, remains with you and your organisation. Where we recommend changes, we encourage you to test them in a way that is appropriate for your environment before applying them to live systems.

4. Use of the Cyber Essentials Mapper

When the Cyber Essentials Mapper is made available online, the following also applies:

  • The tool is provided "as is" for self-assessment and educational use.
  • You should answer questions honestly and only in respect of systems you are authorised to assess.
  • Any optional technical checks offered by the tool must only be run against systems you own or have explicit permission to test.
  • Results are indicative and should be interpreted alongside the official Cyber Essentials requirements and, where appropriate, professional advice.
  • We may change, suspend or withdraw the tool at any time without notice.

5. Educational workshops and training materials

Workshops, INSET sessions, resource kits and other educational content are designed to raise awareness and build practical skills. They are not a substitute for an organisation's own policies, safeguarding procedures or statutory duties. Schools and other organisations remain responsible for their own compliance with applicable guidance and legislation.

6. Accuracy and updates

We take reasonable care to keep the content on this website accurate and up to date, but standards, scheme requirements and good practice change over time. We do not guarantee that the information is complete, current or error-free, and we may update or remove content without notice.

7. External links

This website may contain links to third-party websites, such as the NCSC, IASME or certification bodies. These are provided for convenience. We have no control over their content and are not responsible for it, nor does a link imply endorsement.

8. Intellectual property

Unless otherwise stated, the content of this website, including text, graphics, the Fortify Insight name and logo, and the design of the Cyber Essentials Mapper, belongs to Fortify Insight. You may view and print pages for your own personal or internal business use. You may not copy, republish or commercially exploit our content without written permission. Cyber Essentials and the Cyber Essentials logo are trade marks of the NCSC and are referred to here for descriptive purposes only.

9. Limitation of liability

To the fullest extent permitted by law, Fortify Insight excludes liability for any loss or damage arising from your use of, or reliance on, this website, the Cyber Essentials Mapper or any general information provided through them, including any indirect or consequential loss, loss of data, business interruption or loss of profit.

Nothing in these terms limits or excludes liability for death or personal injury caused by negligence, for fraud, or for any other liability that cannot lawfully be limited or excluded. Liability in respect of paid services is addressed in the relevant client agreement.

10. Availability

We aim to keep the website available but do not guarantee uninterrupted access. We may suspend or restrict access for maintenance or other reasons without notice.

11. Governing law

These terms are governed by the laws of England and Wales, and any dispute relating to them is subject to the exclusive jurisdiction of the courts of England and Wales.

12. Contact

If you have any questions about these terms, please contact info@fortifyinsight.com. Our Privacy Policy explains how we handle personal information.