1 in 1,200: How Rare Cyber Essentials Plus, ISO 27001 and SOC 2 Really Are for Small UK Software Companies (2026 Data)
Last updated 27 September 2026 · Cyber Essentials, Cyber Essentials Plus, ISO 27001, ISO 9001, SOC 2, PCI DSS and IASME Cyber Assurance statistics for the UK, built from government and ISO data rather than vendor marketing.
I run RODMENA, a software company in London, and I run it on my own. The products page lists nearly thirty services, from an authorisation service to a double-entry ledger. So I hear one question from nearly every serious buyer: how do we trust a one-person vendor?
My answer has been certification. I've been putting a lot of hours into Cyber Essentials and Cyber Essentials Plus, and eventually I had to ask whether it would actually set me apart or just tick a box nobody reads. So I went to the primary sources: the UK government's quarterly certification data, the ISO Survey, the government's own evaluation of the scheme, and its