GGMCORP

COMPLIANCE & REGISTRATIONS

Information Security Controls Statement

A self-assessed statement of the technical security controls Go Get Me Corporation Ltd (trading as GGM Corp) has in place, mapped to the five control themes defined by the UK Cyber Essentials scheme. Provided as supporting evidence under section 56 of the Procurement Act 2023, which requires contracting authorities to consider equivalent evidence of technical compliance. Cyber Essentials certification itself is in progress; this statement is not a substitute for independent third-party certification.

Firewalls
COMPLIANT

Boundary firewall enforced on the production server, restricting inbound access to required ports only. Host-based firewall enabled on all in-scope endpoints.

Secure configuration
COMPLIANT

Full-disk encryption and automatic screen lock enabled on all in-scope endpoints. Server administration uses key-based SSH authentication only; password authentication and root login over SSH are disabled.

User access control
COMPLIANT

Administrative and day-to-day access are separated on all in-scope endpoints. Multi-factor authentication is enforced on source control, hosting/server access, and all administrative cloud accounts (payments, email, domain registrar).

Malware protection
COMPLIANT

Scheduled ClamAV scanning is deployed on the production server. Endpoint devices use built-in OS-level malware protection (XProtect and Gatekeeper).

Security update management
COMPLIANT

Operating system and application security updates are applied promptly, with critical and high-severity fixes addressed within days of release. No unsupported software is in use within the assessment scope.

Scope

This assessment covers all endpoint devices and production server infrastructure used by GGM Corp to deliver, develop, and support its software and services.

Declaration

I confirm, as a director of Go Get Me Corporation Ltd, that the controls described above are in place and accurately represented as of the date below.

Director, Go Get Me Corporation Ltd · 4 July 2026

For further detail or evidence to support a specific procurement evaluation, contact contact form.