A close-knit digital product agency made up of designers, developers, marketeers and strategists working in the heart of the historic city of Leicester, Bulb Studios recognises the vital role of cybersecurity in supporting business growth. Responsible for handling sensitive client data and delivering complex digital products, the team at Bulb Studios increasingly found that security credentials were a key differentiator when it came to standing out against competitors. Tenders and procurement processes now regularly ask for detailed information security questionnaires to be completed and Bulb Studios wanted a way to streamline this without reinventing the wheel each time. External validation through Cyber Essentials Plus, the government-backed UK certification that provides independent verification of an organisation’s cybersecurity measures, offered exactly that.
As Jim Willis, managing director at Bulb Studios, explains: “A lot of cyber language focuses on threat and attack. We wanted to flip that narrative, as we very much recognise cyber resilience as a positive enabler of business growth. We didn’t approach Cyber Essentials Plus from a fear perspective; it was about increasing resilience and putting ourselves in a strong position to grow.”
The team were also keen to choose an assessment with real rigour built in. While the self-assessed Cyber Essentials certification is a valuable baseline, the business felt that Cyber Essentials Plus, with its independent technical audit, provided the objective validation clients not only expect but need. And looking ahead, Jim and his business partner Mat Mabe saw Cyber Essentials Plus as a crucial stepping stone towards pursuing ISO 27001 in the future.
A good fit
Bulb Studios was looking for a partner to support the team in achieving Cyber Essentials Plus and Jim was introduced to KIT365 through the East Midlands Cyber Security Cluster. Following an initial introductory call, it was clear that KIT365’s offering aligned perfectly with what the studio was looking for: a partner who was personable, practical and experienced in working with SMEs.
Jim continues: “We wanted a small, approachable team that genuinely wanted to help and KIT365 is definitely that.”
A streamlined, reassuring process.
A scoping call helped the team at KIT365 build a clear picture of the operations and resources at Bulb Studios. From there, KIT365 deployed a digital agent torun vulnerability scans across the company’s devices, identifying any configuration issues or gaps that required attention.
What followed surprised the Bulb Studios team, not because of the work involved, but because of how manageable and clear the entire process was. A big part of this efficiency came from the way both teams worked together, proactive, communicative and aligned from the start, turning what could have been a lengthy process into a smooth, shared effort.
As Jim explains: “KIT365 made it seamless and the entire process was surprisingly easy. They sent over a to-do list of the required remedial actions and they supplied Bulb-branded template policies that we could integrate quickly and directly into our existing policies and procedures. As well, the team at KIT365 made sure everything was communicated in plan, accessible language, translating even the most technical of jargon into easy-to-understand terms to keep us all on the same page.”
Rob Kneller, director of KIT365, adds: “It really was fantastic working with the team at Bulb Studios. They were engaged from the very start and had a real drive to achieve Cyber Essentials Plus. It genuinely felt like a two-way partnership. They were hands-on, keen to get things done and great to work with throughout. Our role was to hold their hand through the entire process, and they embraced every step.”
A two-week accreditation
Once started in earnest, the entire process took just two weeks in total. With KIT365’s help, Bulb Studios made the necessary changes and adjustments and, as the final assessment approached, KIT365 guided the Bulb Studios team through what to expect.
Jim continues: “KIT365 really did support us through the entire process, reassuring us that we were doing everything we needed to in order to achieve Cyber Essentials Plus accreditation. The entire process was incredibly reassuring actually. What could have been daunting and potentially overwhelming was, in reality, a big boost to our cyber confidence and confirmed that a lot of what we were already doing was very strong.”
A big step towards ISO 27001
Achieving Cyber Essentials Plus has given Bulb Studios some additional confidence and clarity as they plan their next move: ISO 27001, with the team planning to pursue the international certification in 2026.
As Jim concludes: “Cyber Essentials Plus has showed us that, with the right support, ISO 27001 is absolutely achievable. Achieving Cyber Essentials Plus has validated our existing practices, boosting our credibility with customers and prospects, and laying the groundwork for our next cybersecurity milestone. When the time comes to make a start, the team at KIT365 will absolutely be our first port of call.”
