# Clipeum IT > Clipeum IT is a UK managed service provider (MSP) and managed security service provider (MSSP), with offices across Norfolk, Suffolk and Hertfordshire and customers nationwide. It delivers managed IT support, 24/7 cyber security from its own UK security operations centre, business continuity, Microsoft 365 and business automation to organisations with 10 to 500 people, with a strong focus on the UK defence supply chain. ## Key facts - Legal name: Clipeum IT Ltd, company number 12150269, registered office 100 Hellesdon Park Road, Drayton High Road, Norwich NR6 5DR - Group companies: Onyx IT (Norwich), REACT Computer Partnership (Woodbridge), CRIBB Cyber Security (Hertfordshire) - Around 30 specialists across 3 UK offices - Own 24/7 security operations centre (SOC) with managed detection and response - Accredited Defence Cyber Certification (DCC) Level 0 Certification Body (September 2026) - Through CRIBB Cyber Security (founded 2016, Hertfordshire), an IASME Certification Body for Cyber Essentials, Cyber Essentials Plus and IASME Cyber Assurance; every client CRIBB has guided through certification has achieved it - Cyber assurance services: penetration testing (external, internal, web application, code review, red team, ITHC), vulnerability scanning (internal, external, web, PCI DSS, PII, cloud), PCI DSS and ISO 27001 support, DPO as a Service, GDPR and information governance, incident response and digital forensics - Named expert: Patrick Carolan, Technical Director of CRIBB Cyber Security, Cyber Essentials and Cyber Essentials Plus assessor, 20+ years in IT and information security - Microsoft Solutions Partner; Cyber Essentials Plus and IASME Cyber Assurance certified - MSP Titans of the Industry Awards, Advanced Cybersecurity finalist in 2025 and 2026, the only UK firm in the category both years - Contact: 0333 996 4264, info@clipeumit.com, https://www.linkedin.com/company/clipeum-it/ ## Services - [Cyber security](https://www.clipeumit.com/cyber-security/): Security that's built around your business, not bolted on. We find the gaps, close them, and watch your systems around the clock from our own UK security operations centre. - [Managed detection and response](https://www.clipeumit.com/cyber-security/mdr/): Most attacks land out of hours, when fewer people are watching. Our in-house UK security operations centre monitors and responds around the clock, so a threat at 2am gets dealt with at 2am. - [Layered cyber security](https://www.clipeumit.com/cyber-security/layered/): No one product stops every attack. Layered security means that if one control is beaten, the next one catches it. Here's how the layers fit together. - [Crucial safeguards](https://www.clipeumit.com/cyber-security/safeguards/): Most successful attacks exploit the basics: an unpatched laptop, a reused password, an admin account nobody locked down. Get these right and you've shut the door on the majority of threats. - [Data security](https://www.clipeumit.com/cyber-security/data-security/): Customer records, designs, financials, contracts. Your data is scattered across laptops, Microsoft 365, file shares and inboxes. We find it, label it, lock it down and make sure you can always get it back. - [Cyber assurance](https://www.clipeumit.com/cyber-assurance/): Independent testing, certification and governance from CRIBB Cyber Security, the assurance arm of the Clipeum group and a UK government-backed Certification Body since 2016. We find the weaknesses, help you fix them, then verify and certify the result so customers, insurers and regulators can see it. - [Penetration testing](https://www.clipeumit.com/cyber-assurance/penetration-testing/): A penetration test is an authorised attack on your systems by people who know exactly how criminals work. We find and prove the weaknesses that matter before someone else does, then hand you a plan to fix them. Delivered by the CRIBB Cyber Security team. - [Vulnerability scanning](https://www.clipeumit.com/cyber-assurance/vulnerability-scanning/): Regular, non-intrusive scanning of your systems, websites and cloud services, with every finding rated Critical, High, Medium or Low and a plain-English fix for each. Quarterly scans keep you compliant; monthly scans keep you ahead. - [Certification](https://www.clipeumit.com/cyber-assurance/certification/): CRIBB is an accredited Certification Body for Cyber Essentials, Cyber Essentials Plus and IASME Cyber Assurance, and a DCC Level 0 Certification Body. We can prepare you for the standard and certify you against it, with a 100% record of clients achieving certification. - [Data protection and DPO](https://www.clipeumit.com/cyber-assurance/data-protection/): Certified data protection officers, GDPR compliance reviews and information governance from CRIBB Cyber Security. We keep you compliant, deal with the ICO and handle the requests, so your team can get on with the business. - [Incident response and forensics](https://www.clipeumit.com/cyber-assurance/incident-response/): Expert-led incident response and digital forensics from the Clipeum group. We contain, investigate and recover, preserve the evidence, and help you talk to clients, insurers and regulators while it's happening. Included for every organisation defended by our SOC. - [Managed IT](https://www.clipeumit.com/managed-it/): Slow systems, endless tickets and security updates you never get round to. We take all of it off your plate with fully managed, proactive IT from UK engineers who talk in plain English. - [AISP, our all-in-one plan](https://www.clipeumit.com/aisp/): AISP replaces separate support, backup, security and licensing contracts with a single plan: one monthly price per person, one team accountable for all of it, and nothing important left as an optional extra. - [Delivery models](https://www.clipeumit.com/managed-it/delivery-models/): Some businesses want us to run everything. Others have a capable internal team that needs extra depth. We shape the service around how you already work. - [Business continuity and backups](https://www.clipeumit.com/managed-it/continuity/): Fire, flood, ransomware or a deleted folder. Backups only matter if they bring you back, quickly, in the right order. We design, run and test your recovery so it's a plan, not a hope. - [TAM and vCIO](https://www.clipeumit.com/managed-it/tam-vcio/): Your Technical Alignment Manager keeps your systems to best-practice standards. Your virtual CIO turns that into a roadmap and budget that serves the business. Together they make IT strategic. - [Business automation](https://www.clipeumit.com/automation/): Manual processes, disconnected systems and paperwork-heavy workflows cost more time and money than they should. We help growing businesses find faster, smarter ways of working. - [AI and Copilot](https://www.clipeumit.com/automation/ai/): Microsoft Copilot and AI agents can save hours every week, but only if your data is ready and your people know how to use them. We make AI safe, useful and measurable. - [Business process automation](https://www.clipeumit.com/automation/process/): With Microsoft Power Platform we build custom apps, automate approvals and connect the tools you already pay for, with minimal code and no expensive bespoke software. - [Document management and workflow](https://www.clipeumit.com/automation/documents/): Lost files, cluttered folders and 10 versions of the same contract. We implement secure, centralised document management in Microsoft 365 that your team will actually use. - [Defence and DCC](https://www.clipeumit.com/defence/): DCC certification and cyber assurance for the defence supply chain. - [About us](https://www.clipeumit.com/about/): - [Our team](https://www.clipeumit.com/about/team/): The people behind your technology. - [Our heritage](https://www.clipeumit.com/about/heritage/): Onyx IT, REACT and CRIBB, now one team. - [Case studies](https://www.clipeumit.com/case-studies/): Real organisations, real deadlines, real outcomes. - [Case study: Bedfordshire Fire and Rescue Service](https://www.clipeumit.com/case-studies/bedfordshire-fire-and-rescue/): Cyber Essentials renewed and Plus achieved on time for 550+ staff across 14 stations. - [Onyx IT](https://www.clipeumit.com/about/heritage/onyx/): Expert IT support for Norwich and Norfolk businesses since 1989. - [REACT Computer Partnership](https://www.clipeumit.com/about/heritage/react/): Measurably better IT support from Woodbridge, Suffolk, since 1997. - [CRIBB Cyber Security](https://www.clipeumit.com/about/heritage/cribb/): The group's Certification Body: testing, certification and governance since 2016. - [Insights](https://www.clipeumit.com/insights/): - [Referral programme](https://www.clipeumit.com/referrals/): - [IT health check](https://www.clipeumit.com/health-check/): 18 questions across 5 areas, about 5 minutes, a clear view of your gaps. - [Contact](https://www.clipeumit.com/contact/): Speak to a real person about your IT. - [Cyber Essentials or Cyber Essentials Plus: which one do you actually need?](https://www.clipeumit.com/insights/cyber-essentials-or-plus/): The 2 certifications share the same 5 controls. The difference is who checks, and who's asking you for it. An assessor's view. - [What actually happens in a penetration test](https://www.clipeumit.com/insights/what-happens-in-a-pen-test/): Hoodies and green text are for films. Here's what a real, authorised test of your business looks like, step by step. - [Clipeum IT is now a Defence Cyber Certification Level 0 Certification Body](https://www.clipeumit.com/insights/dcc-certification-body/): We're now accredited to assess organisations for DCC Level 0, the new baseline for the UK defence supply chain. - [Finalist again: MSP Titans of the Industry, Advanced Cybersecurity](https://www.clipeumit.com/insights/msp-titans-2026/): For the second year running we're one of 10 finalists worldwide, and the only UK business in the category. - [AI is now being used to build ransomware. Here's how to protect your business](https://www.clipeumit.com/insights/ai-ransomware/): Criminals are using AI to write malware and phishing faster than ever. The defences that work are more familiar than you might think. - [The top 5 cyber threats facing UK SMEs today](https://www.clipeumit.com/insights/top-5-threats/): Small and medium businesses are targeted precisely because attackers expect weaker defences. These are the threats we see most. - [Essential data security measures for small businesses](https://www.clipeumit.com/insights/data-security-measures/): SMEs face a double threat: attackers who see them as easy targets, and regulators and customers who expect their data to be protected. Here are the measures that matter most. - [What to look for in a cyber security provider](https://www.clipeumit.com/insights/choosing-a-provider/): Not all providers are equal. Here are the questions worth asking before you sign. - [Where AI helps your business, and where it doesn't](https://www.clipeumit.com/insights/where-to-use-ai/): AI is a powerful tool with real limits. A practical guide to where it earns its keep. ## Defence Cyber Certification (DCC) DCC is the UK Ministry of Defence cyber security certification for the defence supply chain, aligned to Defence Standard 05-138 and delivered through IASME's network of accredited Certification Bodies. It has 4 levels (0 to 3) with 3, 101, 139 and 144 controls respectively. Every level requires Cyber Essentials; Levels 2 and 3 require Cyber Essentials Plus. Certification lasts 3 years with an annual attestation. The MOD has signalled 31 December 2026 as the date by which industry partners should hold Level 0. Clipeum IT is an accredited Level 0 Certification Body and can assess organisations for Level 0. ## Optional - [Sitemap](https://www.clipeumit.com/sitemap/) - [Privacy and cookies](https://www.clipeumit.com/privacy/)