Programme and project management
Plans, milestones, the RAID log, dependency and supplier management, and reporting to your client's programme board across the workstreams you've won.
For consultancies and primes that have won public sector cyber, cloud migration or data centre exit work and need senior delivery capacity under their own contract.
SC Cleared personnel available · Cyber Essentials Plus · IASME Cyber Assurance Level 1 · JOSCAR registered · £1m professional indemnity with Hiscox
Plans, milestones, the RAID log, dependency and supplier management, and reporting to your client's programme board across the workstreams you've won.
Governance cadence, reporting packs, change control, and risk, issue and milestone tracking. Set up and handed to your team, or run for the life of the contract.
The risk register, the controls and the evidence an assurance board asks for, aligned to ISO 27001 and NCSC guidance, plus supplier assurance including Cyber Essentials and DCC.
You hold the call-off and your client sees one supplier: you. Where a framework requires key subcontractors to be approved, as G-Cloud does, we provide what's needed for that approval.
Each engagement is a statement of work with named deliverables and acceptance, not a day-rate seat. That supports the IR35 assessment; the status determination remains the end client's to make.
Section 73 of the Procurement Act 2023 implies 30-day payment terms into public sector sub-contracts, and a term that tries to displace them has no effect.
£1m professional indemnity with Hiscox.
Cloud and infrastructure programmes for UK departments of state: data centre exits, Active Directory uplift and 10,000+ endpoint migrations to Windows 11 and Microsoft Intune, aligned to NCSC and departmental compliance frameworks.
Multinational defence programme delivery across the UK, France and Italy: secure collaboration platforms, export-control governance and engineering compliance under NATO defence standards.










SC Cleared personnel available. £1m professional indemnity with Hiscox.
Usually not. You hold the call-off and we work as your subcontractor. Where a framework requires key subcontractors to be approved, as G-Cloud does, we provide what's needed for that approval.
Only when it relates to a cloud service. G-Cloud 15 permits support relating to the cloud, "not the provision of staff or interims". Otherwise it belongs under a services framework such as DOS7, Technology Services 4 or MCF4.
Within 30 days. Section 73 of the Procurement Act 2023 implies 30-day payment terms into public sector sub-contracts.
We work to a statement of work with named deliverables, which supports the IR35 assessment. The status determination remains the end client's to make.
SC Cleared personnel are available. Tell us the clearance the contract needs on the first call.
No. Goldline prepares organisations for assessment. Certificates are issued by accredited certification bodies.
A 45 minute call about the contract, the workstreams and where you need delivery capacity. No sales pitch.
Book a callWe use cookies to measure the site and improve it.
We use cookies and similar technologies to measure how this site is used and to measure our advertising. Until you choose, Google tags run in a consent-limited mode that sets no cookies. If you accept, we load Google Analytics 4 and Google Ads with cookies, PostHog, Plausible and Microsoft Clarity, which records session replays. Read our Cookies policy.