GDPR is fast approaching and it can mean severe consequences for any business. It affects every business of every size. If you are starting the process you need a consultant or consultancy firm that knows exactly what they are doing and can give expert advice. 2414 have trained over 300+ companies, undertaken consultancy work. We are a member of the British Standards Institute. Our consultants are both F and P Certified Practitioners by the IBITGQ, they have a wealth of knowledge from the original Data Protection Act right the way through to business policies, processes, guidelines, GAP analysis and many other areas. All our GDPR Consultants have held very senior positions at large enterprises so their knowledge is vast.

So if are ready to start the GDPR journey and would like some assistance please call us on 01344 666035 or email Our consultants would be happy to discuss any requirements with you.


2414 have passed the EU GDPR Certification, this enables us to provide all types of services from training all the way through to practical planning guides, implementing and maintaining a GDPR programme, key stages and phases of the process, GAP analysis, training and many other areas. Our documentation is also approved by the IBITGQ. It also enables our practitioners to fulfil the role of a Data Protection Officer (DPO). This qualification also gives us the ability to advise on the implementation and compliance with data privacy laws and related information security standards such as ISO 27001, ITIL, PCI, Cyber Essentials and others. This accreditation is for the ISO 17024-accredited EU GDPR Foundation (EU GDPR F) and EU GDPR Practitioner (EU GDPR P) qualifications certified by IBITGQ.

ISO 27001

The ISO/IEC 27000 family of standards helps organizations keep information assets secure. Using this family of standards will help your organization manage the security of assets such as financial information, intellectual property, employee details or information entrusted to you by third parties. ISO/IEC 27001 is the best-known standard in the family providing requirements for an information security management system (ISMS). There are more than a dozen standards in the 27000 family.


The Payment Card Industry Data Security Standard (PCI DSS) is a proprietary information security standard for organizations that handle branded credit cards from the major card schemes including Visa, MasterCard, American Express, Discover, and JCB. The PCI Standard is mandated by the card brands and administered by the Payment Card Industry Security Standards Council. The standard was created to increase controls around cardholder data to reduce credit card fraud. Validation of compliance is performed annually, either by an external Qualified Security Assessor (QSA) or by a firm specific Internal Security Assessor (ISA) that creates a Report on Compliance (ROC) for organizations handling large volumes of transactions, or by Self-Assessment Questionnaire (SAQ) for companies handling smaller volumes. ARC are currently going through certification in Version 3.2

Cyber Essentials Certification

Cyber Essentials is a government-backed, industry supported scheme to help organisations protect themselves against common cyber attacks. Cyber Essentials compliance is essential for any British organisation that wants to improve its protection against cyber attacks while also gaining a competitive edge. This is separate from ISO 27001:2013 accreditation. By achieving this Cyber Essential Plus certification you demonstrate to customers that you have robust practices and policies protecting your business from cyber-attacks.