Cyber security across the East Midlands, from a firm based in it
Secure Chain Technology Group is headquartered in Chesterfield, at the top of the M1 corridor. We deliver vulnerability management, penetration testing, compliance and managed security to organisations across Derbyshire, Nottinghamshire, Leicestershire and South Yorkshire.
Regional firms face enterprise-grade threats with SME-grade resources
The East Midlands economy runs on manufacturing, logistics, professional services and healthcare — sectors where supply-chain security questionnaires, cyber insurance conditions and regulator expectations have all tightened sharply in the last few years. A fifty-person engineering firm in Derby now faces the same contractual security questions as a five-thousand-person one.
What has not changed is the resource available to answer them. Most regional firms have an IT manager or an external IT provider, no dedicated security staff, and a growing pile of questionnaires, insurance conditions and audit requests. The gap between what is expected and what is resourced is where we work.
Enterprise-grade security, delivered the way regional SMEs actually need it
We take the disciplines that large enterprises run with dedicated teams — continuous vulnerability management, regular penetration testing, formal compliance programmes, monitored detection and response — and deliver them as services sized for organisations without security departments.
That means fixed monthly fees instead of headcount, reports written for directors rather than engineers, remediation actions handed to your existing IT team or provider in a form they can execute, and a named consultant who knows your environment when you call.
- Vulnerability management as a service — scanning, prioritisation, validated remediation tracking
- Penetration testing across web applications, networks and cloud environments
- Cyber Essentials, CE Plus, ISO 27001 and DSPT programmes with honest timescales
- Managed detection and response through our own UK operations
- Supplier and third-party security reviews for supply-chain assurance
Everything in the engagement, set out up front.
All work is delivered by our own UK-based consultants. Nothing is resold, white-labelled or passed offshore.
Vulnerability management
Continuous visibility of your exposure, risk-based prioritisation, and monthly reporting that shows trend rather than a static snapshot.
Penetration testing
Senior-led manual testing with plain-English reporting and remediation guidance written for the people who will action it.
Compliance & certification
Cyber Essentials, CE Plus, ISO 27001 and DSPT — from gap assessment to audit day, with evidence packs that stand up to inspection.
Managed security operations
Monitoring and response for firms that need enterprise-grade vigilance without enterprise-grade headcount.
Third-party risk
Practical reviews of the suppliers your business depends on — and help answering the questionnaires your clients send you.
Incident response
Local, same-day response across the region when something goes wrong, with stabilisation before commercial conversations.
What you receive.
- Fixed-scope, fixed-price proposals following a scoping call
- A named lead consultant who stays with your account
- Monthly service reviews with honest trend data
- Remediation actions your IT team can execute without translation
- Audit-ready evidence for compliance engagements
- Direct engineer access during incidents
Built for organisations that need the work done properly.
Manufacturing & engineering
Firms in the region's advanced manufacturing and logistics chains facing Cyber Essentials Plus as a condition of trade.
Professional services
Legal, accountancy and financial firms answering client security questionnaires and regulator expectations.
Healthcare & care
Providers working through DSPT submissions or handling sensitive patient and service-user data.
Any SME with growing obligations
Organisations whose insurance, clients or auditors now expect security maturity that did not exist three years ago.
What changes once the work is done.
Questionnaires stop being a fire drill
Supply-chain and insurance security questions get answered from existing reports and certificates, not a weekend of panic.
Real risk reduction
Open vulnerabilities shrink month on month, measured by age and severity — not by how many scans ran.
Certifications that hold up
Cyber Essentials, CE Plus or ISO 27001 achieved on honest timescales, with evidence that survives renewal.
Your IT provider supported, not replaced
Clear, prioritised actions handed to the people who already look after your systems.
Insurance confidence
Controls implemented properly, so your policy answers are true and evidencable at renewal or claim time.
A local, accountable partner
A firm based in the region, whose reputation here depends on the quality of the work.
Based here, accountable here
There are plenty of national providers who will sell security services into the East Midlands from a distance. Some are good. But there is a practical difference when your security partner is twenty minutes up the motorway: discovery workshops happen in your office, internal tests happen on your network properly, and the first hours of an incident have someone physically present if that is what is needed.
It also means our commercial interests align with yours over the long term. We work in this region's business community, and our name travels through it. That is worth more to us than any individual contract — and it shows in how we scope, price and deliver.
Questions we are asked most often.
Which parts of the East Midlands do you cover?
We are headquartered in Chesterfield and work regularly across Derbyshire, Nottinghamshire, Leicestershire and South Yorkshire — Derby, Nottingham, Leicester, Mansfield, Chesterfield and the towns between. On-site work across the region is routine for us, and we support clients further afield remotely.
We are a small firm. Are we too small for this?
No. Most of our clients are between 20 and 300 staff. The services are sized accordingly — a vulnerability management service for a 50-device estate is priced for a 50-device estate. What we will not do is sell you an enterprise programme you do not need.
How is this different from what our IT support company offers?
IT support keeps your systems running; security is about what happens when someone tries to break them. Most IT providers are honest that deep security — penetration testing, vulnerability management programmes, ISO 27001 — is outside their specialism. We work alongside your IT provider, not instead of them.
Can you help with cyber insurance requirements?
Yes, increasingly. Insurers are asking specific questions about MFA, patching cadence, backups and monitoring — and declining claims when the answers given did not match reality. We help you implement the controls properly so the questionnaire answers are true, and we can evidence them at renewal.
What happens in the first conversation?
A 30-minute call with a consultant. We ask about your environment, what is driving the enquiry — a client requirement, an insurance renewal, a near miss — and tell you honestly what we would do in your position. If that does not need us, we will say so.
Start with a straight answer
Tell us what is driving the enquiry — a client requirement, an insurance renewal, a concern you cannot quite name — and we will tell you what we would do in your position.
Book a consultation