Publish Date: December 23, 2025
Category: Case Studies
- Client: Cassiltoun Housing Association (Scotland)
- Industry: Social Housing
- Primary Objective: Cyber Security Gap Analysis & Cyber Essentials Certification
- Solution: Comprehensive Security Assessment and Cyber Essentials Certification
Client Testimonial
"Joyous, easy, thorough, competent - I just highly recommend working with your organisation. You do demystify jargon and make the process so simple and straightforward."
— Clair Malpas, CEO, Cassiltoun Housing Association (Scotland)
The Challenge
"I had a look at it myself and just found it very complex and bewildering. I couldn't get to grips with everything because a lot of it appeared to be jargon."
When Clair Malpas, CEO of Cassiltoun Housing Association, sought to understand their organisation's cyber security posture, she knew she needed professional guidance. The organisation was undergoing a major IT transformation, moving from traditional desk phones to cloud-based systems and expanding their digital infrastructure. This presented a good opportunity for a comprehensive cyber security gap analysis.
As a housing association handling sensitive resident data, cyber security was critical. Clair needed to know: where were the gaps, what were the risks, and how could they be addressed?
Our Approach
"Having the time and the dialogue - face-to-face, I know it's over Teams, but being able to have that discussion, I found the most useful. There's terminology that I don't necessarily understand, but being able to speak to you about it was really beneficial."
- Simplified Communication: We eliminated technical jargon and explained complex cyber security concepts in plain English, ensuring the CEO could make informed decisions about her organisation's security posture.
- Structured Engagement: A series of Teams workshops created space for interactive discussions, step-by-step guidance and practical actions.
- Flexible Scheduling: The ability to self-book sessions around a busy diary ensured steady progress without disruption.
- Integrated Service: Rather than requiring separate consultancy and Cyber Essentials certification providers, we delivered both services seamlessly, maintaining continuity throughout the entire process.
The Results
"I thought we were going to be much further away from it. I thought we'd have multiple actions in terms of where we needed to get to. So that was a big surprise - actually how close we were to being able to go for the accreditation."
- Comprehensive Security Assessment: Conducted a thorough gap analysis that revealed the organisation was much closer to good cyber security practices than expected.
- Cyber Essentials Certification: As a natural outcome of the gap analysis, the organisation achieved Cyber Essentials certification with minimal additional effort.
- Enhanced Security Culture: The process reinforced organisation-wide improvements in security practices, from regular system updates to better physical security protocols for laptops and devices.
- Increased Confidence and Future Planning: Clair gained the knowledge and confidence to maintain cyber security standards and plan for ongoing security training for her team.
What We Offer to Keep You Secure
Every organisation is different, but the challenges of cyber security are often the same: limited time, growing risks, and a maze of technical terms that make it hard to know where to start.
We make it simple. Here’s how our team helps businesses like Cassiltoun Housing Association stay secure and confident:
- Cyber Essentials & Cyber Essentials Plus: Show your organisation’s commitment to strong cyber hygiene with government-recognised certification. We guide you through every requirement from password management to access control, ensuring you meet the standards that prevent the most common security issues.
- Security Gap Analysis: Uncover hidden vulnerabilities before attackers do. Our comprehensive assessments highlight where your defences are strong, where gaps exist, and provide a clear, prioritised roadmap for improvement.
- Cyber Security Enhancements: From policy updates to technical control improvements, we implement practical measures that strengthen your security posture and reduce the likelihood of breaches like those that have impacted organisations such as JLS.
- Cloud Security Consulting: Moving to the cloud brings flexibility but also new risks. We help ensure your cloud infrastructure is configured securely, with strong access controls, encryption, and threat detection mechanisms that keep your data safe.
- Staff Awareness & Training: Technology is only part of the equation. People remain one of the biggest risk factors. Our training programmes help your team recognise phishing, scams, and social engineering attempts, the same tactics that often lead to major breaches.
Your Next Step: Simplify Cyber Security and Gain Confidence
Cassiltoun Housing Association’s experience shows that understanding and improving cyber security doesn’t have to be overwhelming. With the right guidance, even complex challenges can be made clear and manageable.
At Shonsys, we remove the jargon and make cyber security simple, practical, and tailored to your organisation’s needs.
Start your journey today with a Cyber Security Gap Analysis or Cyber Essentials certification and build lasting confidence in your organisation’s security.
Get in touch with Shonsys now — let’s make cyber security straightforward for your business.
