What it means to be a JOSCAR Registered Supplier

For organisations working on defence programmes, supplier qualification is a necessary but time-consuming part of the process. JOSCAR simplifies that by holding a single, validated supplier profile that buying organisations can access directly – covering capability, compliance, information security, and financial standing.

In practical terms, if you’re looking for an IT or cyber security supplier for a defence programme and need to verify that they meet the required standards, we’re already on the register. Which means that’s one less thing for you to worry about.

How this fits alongside our other credentials

JOSCAR registration sits naturally alongside Base3’s existing defence sector credentials:

• We are an approved Defence Cyber Certification (DCC) body, supporting MOD suppliers through the DCC scheme against Defence Standard 05-138
• We are an approved Cyber Essentials and Cyber Essentials Plus certification body, recognised by IASME and the NCSC
• We are ISO 9001:2015 certified, demonstrating independently audited quality management across all our services
• We are an AWS Partner, bringing certified cloud expertise to defence and security environments

Together, these credentials reflect a consistent commitment to meeting the standards that defence sector organisations expect from their suppliers – not as a box-ticking exercise, but as part of how we work.

Working with Base3 in the defence sector

If you’re working in or around the defence supply chain and need IT or cyber security services from a JOSCAR registered supplier that already meets the required standards, get in touch to start the conversation.

The post Base3 is now JOSCAR Registered appeared first on Base3 Solutions Ltd.

What is ISO 9001?

ISO 9001 is a framework for how organisations plan, deliver, and continuously improve their services — with documented processes, clear accountability, and independent auditing to verify that the standard is being maintained. It isn’t a one-off achievement. Certification requires ongoing commitment and regular external review, which is the point.

What we’ve done

Achieving certification meant taking a structured look at how we deliver our services from end to end – how projects are scoped and planned, how work is carried out and reviewed, and how we handle issues when they arise. In many respects it built on how we already worked. But there is a meaningful difference between doing things consistently and having documented, auditable processes that prove it. This exercise made that distinction clear in places, and we’re better for it.

What an ISO 9001 certified IT company means for customers

The practical outcome is consistency. As an ISO 9001 certified IT company, the same documented standards apply across every engagement – whether that’s a cloud migration, cyber security certification, or ongoing managed IT support. You’re not relying on institutional knowledge that sits with one person, or hoping the right engineer picks up your call. The processes are defined, followed, and independently audited.

• Consistent delivery across every project and service
• Documented procedures that mean nothing falls through the gaps
• Clear accountability at every stage
• A quality management system that is independently maintained and reviewed

Final thought

ISO 9001 certification isn’t a destination – it’s a framework for continuous improvement. We’re proud to have achieved it, and more importantly, we’re committed to what maintaining it requires. If you’d like to know more about how Base3 works, or want to discuss a project, get in touch.

Base3 is ISO 9001:2015 certified across all services. Click here for ISO 9001:2015 certificate.

The post Base3 is ISO 9001:2015 Certified. Here’s What That Actually Means. appeared first on Base3 Solutions Ltd.

Here’s a plain-language breakdown of what each one is, what it involves, and how to know which is right for your organisation.

What is Cyber Essentials?

Cyber Essentials is a UK Government-backed certification scheme designed to help businesses protect themselves against the most common cyber threats. It focuses on five core technical controls that, when properly implemented, significantly reduce your exposure to the vast majority of internet-based attacks.

The certification is annually renewable and is recognised across the public and private sector as a credible baseline of cyber security.

Cyber Essentials is a mandatory requirement for any organisation bidding for UK Government contracts that involve handling personal data or providing certain technical products and services. If you’re looking to work with the public sector, you’ll need it. Find out more at NCSC.gov.uk.

What does it cover?

The five technical controls are:

1. Firewalls and internet gateways
2. Secure configuration
3. User access control
4. Malware protection
5. Security update management

How does it work?

Cyber Essentials is a verified self-assessment. You complete an online questionnaire answering questions about how your organisation has implemented each of the five controls. The answers are reviewed by a certification body – and if they meet the required standard, you receive your certificate.

It’s straightforward, fixed-price, and achievable for businesses of any size.

What is Cyber Essentials Plus UK?

Cyber Essentials Plus covers exactly the same five controls – but instead of a self-assessment, it includes an independent technical audit carried out by a qualified assessor. Your systems are actually tested, not just described.

This means you’re not only telling someone your controls are in place – you’re proving it.

Cyber Essentials Plus includes internal and external vulnerability scanning, on-site or remote device assessment, and malware protection testing. It’s the same framework as Cyber Essentials, but independently verified – which provides a significantly higher level of assurance to customers, partners, and supply chain stakeholders.

What does the audit involve?

A Cyber Essentials Plus assessment typically includes:

• Internal vulnerability scanning across your devices and network
• External vulnerability testing of your internet-facing systems
• Verification of user accounts and access privileges
• Testing of malware protection across endpoints
• Remote or on-site device assessment depending on your setup

Important: you must hold a valid Cyber Essentials certificate before you can achieve Cyber Essentials Plus.

What’s the difference in cost?

Cyber Essentials is fixed-price, set by IASME:

Cyber Essentials Plus is not fixed-price. The cost depends on the number of users, devices, sites, and the complexity of your network. Contact us for a tailored quote.

Which one do you need?

For most small businesses with no specific contractual requirements, Cyber Essentials provides a solid, credible baseline that demonstrates you take cyber security seriously.

Cyber Essentials Plus is worth considering if:

• You work with government departments or public sector bodies
• Your contract specifically requires it
• You handle sensitive or confidential client information
• You are part of a defence or government supply chain
• You want independently verified confirmation of your security controls

Cyber Essentials Plus is increasingly being specified as a requirement in defence supply chain contracts – particularly as the Ministry of Defence rolls out its Defence Cyber Certification (DCC) scheme. DCC Level 2 and above require Cyber Essentials Plus as a prerequisite. You can read more about DCC on our Defence Cyber Certification page.

Not sure which applies to you?

If you’re unsure which level is right for your organisation – or whether you’re ready to start the process – Base3 can help. As an approved certification body for Cyber Essentials Plus in the UK, we support businesses through the entire process, from initial readiness through to certification.

Get in touch and we’ll point you in the right direction.

The post Cyber Essentials vs Cyber Essentials Plus: What’s the Difference? appeared first on Base3 Solutions Ltd.

AWS has a lot of partners. Not all of them are the same.

Amazon Web Services operates one of the largest partner networks in the world. Thousands of companies globally carry some form of AWS partner status – from global system integrators with tens of thousands of staff, to smaller specialist firms working with SMEs.

The AWS Partner Network (APN) has different tiers and specialisations, and the requirements to achieve and maintain them are not trivial. Partners are assessed on technical capability, certified staff, and – critically – customer outcomes. It isn’t a badge you buy. It’s a status you earn and maintain.

So what does it mean in practice for your business?

Working with an AWS Partner rather than a generalist IT provider means a few specific things:

Verified technical expertise. AWS Partners are required to maintain a minimum number of certified engineers. Those certifications aren’t easy to obtain – they require deep, demonstrable knowledge of AWS services, architecture, and best practice.

AWS currently offers over 12 specialisations within its Partner Network, covering areas including DevOps, security, data and analytics, and migration. Achieving a specialisation requires partners to demonstrate not just certified staff, but validated customer success stories reviewed by AWS – meaning the specialisation reflects real delivery experience, not just theoretical knowledge. You can explore the full AWS Partner Network and verify partner status directly at aws.amazon.com/partners.

Access to AWS resources. Partners have direct relationships with AWS, including access to technical support, architectural guidance, and in some cases, funding programmes that can offset the cost of migration or proof-of-concept work for eligible customers.

Accountability. AWS monitors partner performance and customer satisfaction. A partner that consistently delivers poor outcomes risks losing their status. That accountability doesn’t exist with an uncertified provider.

Up-to-date knowledge. AWS releases hundreds of new features and services every year. Certified partners are required to keep their knowledge current – which matters when you’re making decisions about how to architect your cloud environment.

The difference between knowing AWS and working in AWS

This is something we talk about openly at Base3. The AWS certification path is rigorous and valuable – it gives engineers a thorough grounding in how AWS services work and how they’re designed to be used together.

But certifications teach you what the services are called and what they do. Real environments teach you what trade-offs actually matter.

Many of the issues we encounter in AWS environments aren’t caused by a lack of knowledge. They’re caused by things like over-engineering, unclear ownership, and security decisions that were deferred until later and then never revisited. AWS gives you enormous flexibility and a huge number of tools – but good architecture is often about restraint. Choosing the simplest thing that works, and being clear about responsibility and security from day one.

That perspective only comes from experience. It’s what separates a partner that can pass an exam from one that can genuinely help your business make good decisions.

What to look for when choosing an AWS Partner

Not every AWS Partner will be the right fit for your business. When evaluating options, it’s worth asking:

• Do they have experience with businesses of a similar size and complexity to yours?
• Can they explain their approach in plain language, without hiding behind jargon?
• Do they take time to understand your business before recommending a solution?
• Are they transparent about cost, timeline, and risk?
• Do they have references or case studies from comparable organisations?

A good AWS Partner should feel like an extension of your team – not a vendor trying to sell you the most complex solution possible.

Base3 is an AWS Partner in the UK

As an AWS Partner in the UK, Base3 has completed the full certification path and brings real-world experience to every cloud project we work on – whether that’s a first migration, an architecture review, or ongoing cloud management.

But more than the certifications, we bring real-world experience of what works in practice for UK businesses. If you’re considering AWS and want to talk through your options without any obligation, we’d be happy to help.

The post What It Means to Work With an AWS Partner in the UK appeared first on Base3 Solutions Ltd.