Skip to main content
Currently accepting diagnostic bookings. Same-week availability. Book the Free Diagnostic →
Programme delivery for cyber and cloud contracts

Won the contract? We'll help you deliver it.

For consultancies and primes that have won public sector cyber, cloud migration or data centre exit work and need senior delivery capacity under their own contract.

SC Cleared personnel available · Cyber Essentials Plus · IASME Cyber Assurance Level 1 · JOSCAR registered · £1m professional indemnity with Hiscox

What we take on

Three things, delivered under your contract.

Programme and project management

Plans, milestones, the RAID log, dependency and supplier management, and reporting to your client's programme board across the workstreams you've won.

Setting up and running a PMO

Governance cadence, reporting packs, change control, and risk, issue and milestone tracking. Set up and handed to your team, or run for the life of the contract.

Running the security and assurance workstream

The risk register, the controls and the evidence an assurance board asks for, aligned to ISO 27001 and NCSC guidance, plus supplier assurance including Cyber Essentials and DCC.

How the work runs

Your framework, your client, our deliverables.

Subcontract under your framework

You hold the call-off and your client sees one supplier: you. Where a framework requires key subcontractors to be approved, as G-Cloud does, we provide what's needed for that approval.

A statement of work with deliverables

Each engagement is a statement of work with named deliverables and acceptance, not a day-rate seat. That supports the IR35 assessment; the status determination remains the end client's to make.

30-day payment

Section 73 of the Procurement Act 2023 implies 30-day payment terms into public sector sub-contracts, and a term that tries to displace them has no effect.

Insured

£1m professional indemnity with Hiscox.

G-Cloud and programme management. Under G-Cloud 15 (RM1557.15), GCA (formerly CCS) permits only support relating to the cloud, "not the provision of staff or interims". Programme management bought through G-Cloud has to be tied to a cloud service. Otherwise it sits under a services framework such as DOS7 (RM1043.9), Technology Services 4 (RM6190) or MCF4 (RM6309).
Delivery history

Work of this kind, delivered before.

Central government

Cloud and infrastructure programmes for UK departments of state: data centre exits, Active Directory uplift and 10,000+ endpoint migrations to Windows 11 and Microsoft Intune, aligned to NCSC and departmental compliance frameworks.

Defence primes and NATO

Multinational defence programme delivery across the UK, France and Italy: secure collaboration platforms, export-control governance and engineering compliance under NATO defence standards.

Certified and registered
  • Cyber Essentials Plus certified
  • IASME Cyber Assurance Level 1
  • JOSCAR registered
  • ISO 27001 Senior Lead Implementer, PECB
  • ISO 27001 Lead Auditor, PECB
  • ISO 42001 Lead Implementer, PECB
  • ISO 42001 Lead Auditor, PECB
  • CISSP, ISC2
  • PMP, Project Management Institute
  • CompTIA Security+

SC Cleared personnel available. £1m professional indemnity with Hiscox.

Do you need to be on our framework?

Usually not. You hold the call-off and we work as your subcontractor. Where a framework requires key subcontractors to be approved, as G-Cloud does, we provide what's needed for that approval.

Can programme management go through G-Cloud?

Only when it relates to a cloud service. G-Cloud 15 permits support relating to the cloud, "not the provision of staff or interims". Otherwise it belongs under a services framework such as DOS7, Technology Services 4 or MCF4.

When do we have to pay you?

Within 30 days. Section 73 of the Procurement Act 2023 implies 30-day payment terms into public sector sub-contracts.

Is the work inside IR35?

We work to a statement of work with named deliverables, which supports the IR35 assessment. The status determination remains the end client's to make.

Do you have cleared people?

SC Cleared personnel are available. Tell us the clearance the contract needs on the first call.

Does Goldline certify organisations?

No. Goldline prepares organisations for assessment. Certificates are issued by accredited certification bodies.

Talk through the contract you've won.

A 45 minute call about the contract, the workstreams and where you need delivery capacity. No sales pitch.

Book a call
Goldline prepares organisations for assessment. Certificates are issued by accredited certification bodies.
Goldline Consultancy Ltd, Companies House 10901798

We use cookies to measure the site and improve it.

Book the Free Diagnostic