Who we serve

Recruitment

Recruiters handle huge volumes of personal data. Clients and candidates need to know it is safe with you. We keep your systems secure, compliant and running so your team can focus on placing people.

TESTED
100% success record

Every client we have taken through an accreditation has achieved it - and kept it at every renewal.

We never mark our own homework

We submit ourselves to independent third-party testing. Certification is always issued by an independent body, never by us.

Physical tests, not questionnaires

We prove each control works on your real devices and services. Questionnaire answers can be inaccurate or optimistic; tests cannot.

Free assessment of where you are

We will look at your current position for free and tell you exactly which controls you need - with no obligation.

What recruitment organisations tell us keeps them up at night

Candidate and client data

CVs, right-to-work documents and pay details are special targets - UK GDPR demands you can prove they are protected.

Client and framework questionnaires

Clients and public sector frameworks increasingly ask for Cyber Essentials before they will engage you.

Remote and hybrid consultants

Consultants work from home and on the move - every device and login must be secured.

Phishing and account takeover

Busy inboxes and shared job boards make recruiters a favourite phishing target.

How we help recruitment organisations

Recruitment agencies need a secure, compliant platform for the vast amount of personal data the recruitment process generates. For over 20 years we have helped recruiters find clarity in a sea of technology choices, taking responsibility for keeping your systems running so your team can focus on recruiting.

Cyber Essentials

Government-backed proof that candidate and client data is safe with you, which helps you retain customers and win new ones.

GDPR experts

A tailored IT setup that keeps you compliant with UK GDPR, and advice on preventing costly, reputation-damaging breaches.

Secure remote working

Fast Remote Desktop access and a trusted VPN so consultants can work anywhere without compromising security.

Cloud for recruitment firms

Microsoft 365, virtual desktops and hosted telephony give access from any device and less time on admin.

Prevent cyber attacks

Managed anti-virus, 24/7 monitoring and phishing protection keep your data safe and secure.

The standards that matter for recruitment

What sets Total Group apart

Compliance monitored in real time - not checked once a year

Our own intellectual property is how we run compliance: we monitor the major recruitment controls in real time using the leading enterprise SaaS tools. That lets us map gaps and bridge controls quickly and accurately while you work towards accreditation - and then keep standards up, and risk down, every day after it.

Controls monitored in real time

We watch the major controls continuously using leading enterprise SaaS security and compliance tools - not once a year with a questionnaire.

Gaps mapped and bridged fast

Live data shows exactly which controls are missing or drifting, so we can map the gaps and bridge them quickly and accurately.

Compliant change management

Every change to your systems follows a compliant change process, so an upgrade or a new starter never quietly breaks a control.

Compliance that improves, not decays

Issues are picked up and fixed as they happen. Your risk goes down over the year instead of creeping up until the next audit.

HighLowaudit panic▬ Annual review▬ Total Group real-time monitoringControl health over 12 months
Annual review“We were compliant a year ago.”
  • Controls drift unnoticed for months
  • Renewal is a fraught cliff edge
  • Evidence is gathered in a rush
  • Risk rises until the next audit
Total Group real-time“We were compliant yesterday.”
  • Every major control watched continuously
  • Accreditation day is a normal day
  • Evidence is always current
  • Issues fixed as they happen, so compliance improves

Annual review is not viable in the current threat landscape. Attackers do not wait twelve months - so neither do we.

Stay compliant all year: Levels 1 to 3 📄 PDF

Certification is a snapshot. Our compliance plans keep the controls tested, the evidence current and renewals handled.

Level 1 - Demonstrate

CE and Digital GDPR Controls - Our consultants will complete the CE submission with input from your staff.

£163.50/month + VAT
£545 setup + VAT today, then 12 monthly payments of £196.20 inc VAT

    Level 2 - Practice

    CE, CE+ and Digital GDPR Controls -Monitoring & Submission as a Service (Submission following Quarter)

    £599.50/month + VAT
    £2,725 setup + VAT today, then 12 monthly payments of £719.40 inc VAT

      Level 3 - Prove

      CE, CE+, GDPR Governance, Supply Chain Audits, Pen Testing, Vulnerability Scanning, (Real-time Maintained) Compliance As A Service

      £708.50/month + VAT
      £4,360 setup + VAT today, then 12 monthly payments of £850.20 inc VAT

        Questions and answers

        Do recruitment agencies need Cyber Essentials?

        It is increasingly asked for by clients and public sector frameworks, and it is the quickest way to prove the core controls that protect candidate data are in place.

        How does UK GDPR apply to recruiters?

        You hold large volumes of personal and often special category data. You must keep it secure, retain it only as long as needed and be able to evidence both - we help with all three.

        How do recruitment firms become Cyber Essentials certified?

        Our managed IT for recruitment companies ticks every box Cyber Essentials needs, protecting you from around 80% of common cyber attacks and showing clients and candidates you are trustworthy.

        How do you help recruitment firms work remotely?

        Whether you are fully remote or hybrid, we provide the right technology stack - secure devices, Remote Desktop, VPN and cloud tools - so your team can work from anywhere and still deliver a great client and candidate experience.

        What makes Total Group different from other compliance providers?

        We monitor the major controls in real time using leading enterprise SaaS tools, with compliant change management behind every change. Gaps are found and bridged quickly, standards are maintained every day, and accreditation stops being a fraught cliff edge - you can say you were compliant yesterday, not a year ago.

        Why is an annual review not enough?

        Controls drift: devices miss patches, accounts change, new services appear. With an annual review that drift goes unnoticed for months while risk rises. Real-time monitoring catches it as it happens, so issues are fixed quickly and your compliance improves rather than decays.

        Find out where you stand - free

        Book a free, no-obligation Recruitment compliance assessment. We will show you which controls you already meet, which you need, and the quickest route to getting certified.

        Free resources

        Other sectors we serve