About

I'm Carl. I help UK businesses understand their cyber security.

Then decide what to do about it, in plain English and without a sales pitch for more IT.

Carl Pugh smiling, holding a pint in front of a colourful painted heart

My story

I've worked in IT for 30 years. I started out fixing computers, then worked my way up through technical and management roles to IT Director, sitting at board level.

13 years ago I started my own IT company in Manchester, and later moved it home to Nottinghamshire. I still own it today, and it's based in Mansfield. Running a business showed me IT from the other side of the desk, with the cost, the time and the worry about whether you're doing enough.

Security has been part of my work the whole way through. Over the years it has gone by different names, from firewalls and antivirus to data protection and compliance, but the job has always been the same. Keep the business safe and keep it running.

I've also trained as a cyber security consultant to back up that experience. CertiCyber is where I share it with businesses that want clear, independent advice.

30

years working in IT, from engineer to IT Director

13

years running my own IT company

£21,000

roughly what ISO 27001 cost my business, plus a day a week for a year

I've been sold the dream too

As a business owner I've paid for tools and expertise that promised big results and never delivered. I know how that feels, and I don't want any client of mine to feel it because of me.

That's why I keep my advice plain and my prices fixed, and why I'll tell you when you don't need something.

I've done it myself

I led my own company through Cyber Essentials, Cyber Essentials Plus and ISO 27001. I've filled in the questions, prepared for the audits and kept the paperwork up to date when the business changed. So when I explain what certification asks of you, I'm talking from experience, not from a textbook.

Those certificates belong to Tech Service Partner Limited, the IT company I founded. They don't cover CertiCyber. Read what ISO 27001 really cost my business.

Qualifications

I'm working towards the IASME Cyber Advisor and Cyber Essentials Assessor qualifications. I'll list each one here when it is confirmed.

How I work

  • Plain words. If a director with no IT background couldn't explain my advice to a colleague, I rewrite it.
  • Sources you can check. My advice follows NCSC guidance and the current IASME requirements, and I link to them.
  • I advise, you decide. You or your IT provider carry out the work. I make sure you know what to do and why.
  • Alongside your IT provider. I'm not trying to replace whoever looks after your IT. Most of my clients keep them.

My independence promise

CertiCyber is separate from my IT company. Through CertiCyber I don't sell IT support, software or hardware, and if you already have an IT provider, I'll work alongside them. I won't try to move you to my company. I don't take commission or referral fees from certification bodies or anyone else. When you get certified, you pay the certification body directly, so you can see exactly what you are paying for.

Away from work

Outside cyber security, golf is my passion. I play whenever I can, and my company sponsors a hole at a charity golf day.

I've found a round of golf is one of the best places to talk business. Four hours on a course tells you more about someone than any video call. So if you play and want to talk about your cyber security, get in touch and we can do it over 18 holes.

CertiCyber is a brand operated by Tech Service Partner Limited, registered in England and Wales, company number 08606859. Registered office at Unit 1 Oak House Business Centre, Samuel Brunts Way, Mansfield, NG18 2AH.

Want to talk it through?

Send me one quick question and I'll give you a straight answer in plain English, usually within one working day. Prefer to talk it through? Book a free 30 minute call.