osp cyber academy

Name

osp cyber academy

Legal name

Operational Security Professionals Group Limited

Website

https://ospcyberacademy.com

Company type

Private

Operating status

Operating

Ownership category

akta.pro rank

Product category

Cyber Security Training Services

NAICS

Computer Training (61142), Computer Training (611420), Professional and Management Development Training (61143), Business Schools and Computer and Management Training (6114), Professional and Management Development Training (611430)

SIC

Services-Educational Services (8200)

akta.pro primary industry

Cybersecurity (EDAAAPAC)

akta.pro secondary industries

Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF), Secure Remote Work, BYOD & Mobile Device Security Training (EDABAGAE), Cybersecurity Training & Awareness Programs (BPAEANAF)

Keywords

• Cyber security training
• Data protection training
• GDPR compliance courses
• NCSC assured training
• OT cyber security

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Online eLearning Course Sales: Individual and group seat licenses for NCSC-assured eLearning courses (Cyber Security Awareness, GDPR Staff Awareness, OT Cyber Security, etc.) sold directly through the website with tiered volume pricing. Certificates issued upon completion, valid for 12 months. Course access expires 6 months after enrolment.
2. LMS SCORM Packages: Annual subscription packages for organisations to upload courses to their own LMS for unlimited users. Available in SCORM 1.2, SCORM 2004, AICC, Tin Can API, and cmi5 formats. Prices range from approximately $5,995/year to $12,495/year depending on course.
3. Classroom and Virtual Training Delivery: Instructor-led classroom and virtual training sessions for Cyber Security Awareness, GDPR Awareness, and GDPR Practitioner courses. Delivered at various levels including awareness and practitioner. Booking and cancellation fees apply with tiered cancellation policy.
4. Consultancy Services: Data Protection and GDPR consultancy including GDPR Discovery Audit, Data Protection Impact Assessment (DPIA), Data Protection Officer as an outsourced service, ISO 27001 Gap Analysis, Internal Audit, and ISMS Implementation. Also includes Cyber Risk and Resilience consultancy. Charged on time-and-materials basis or fixed price per engagement.
5. Affiliate Partner Programme: Three-tier affiliate partner programme (Affiliate, Gold Affiliate, Platinum Affiliate) with statutory setup fees (£5,000–£10,000) earning 10-30% commission on course sales, LMS packages, classroom courses, and consultancy services.

Pricing tiers

Go-to-market motion3 records

Distribution channels6 records

Marketing channels8 records

Core offering

OSP Cyber Academy sells NCSC-assured cyber security, GDPR/data protection and OT cyber security training as eLearning courses, LMS SCORM packages, instructor-led classroom/virtual sessions, gamified escape room training, and bespoke managed training services. It also delivers related compliance consultancy including outsourced Data Protection Officer services, GDPR Discovery Audits, Data Protection Impact Assessments, ISO 27001 implementation support, and cyber risk and resilience advisory.

Product overview

OSP Cyber Academy is a Managed Service Provider offering NCSC-assured Cyber/Information Security and Data Protection training through multiple delivery channels. The core product portfolio includes: (1) eLearning courses sold as individual seat licenses or group licences, covering Cyber Security Awareness, GDPR Staff Awareness, OT Cyber Security, Phishing and Social Engineering, Password Management, Ransomware/Malware, Mobile Device Security, Data Breach Response, Supply Chain Security, Subject Access Requests, Digital Footprint, and Agent Cyber Awareness for youth; (2) LMS SCORM Packages available in SCORM 1.2, SCORM 2004, AICC, Tin Can API, and cmi5 formats for upload to organisational learning management systems with 12-month access; (3) Instructor-led Classroom and Virtual Training for Cyber Security Awareness, GDPR Awareness, GDPR Practitioner and 8+ additional courses; (4) Gamified Escape Room Training; (5) Bespoke training designed for specific organisational needs; and (6) Consultancy services including GDPR Consultancy, Discovery Audits, DPIA, Outsourced DPO, ISO 27001 implementation/audit, and Cyber Risk & Resilience advisory. The Scottish OT Cyber Summit is also organised by the company. All third-party trademark rights are acknowledged alongside NCSC assured training status.

Differentiator

Problem solved

Functional benefit

Products and services

• Cyber Security Staff Awareness Course 40-minute NCSC-assured eLearning course developing staff understanding of their role and responsibilities in cyber security. Externally assured by APMG International under the NCSC Assured Training Scheme.
• GDPR Staff Awareness Course 40-minute NCSC-assured eLearning course providing fundamental knowledge and awareness of the Data Protection Act 2018 and GDPR, suitable for induction or annual training of all staff.
• OT Cyber Security Awareness Course 1-hour Operational Technology cyber security eLearning course helping staff understand OT risks, common attack methods and practical steps to keep industrial systems secure. Produced in partnership with Cyber Prism.
• Phishing and Social Engineering Course 10-minute cyber security awareness module teaching staff to recognise suspicious emails, manipulation tactics and prevent data breaches, covering SPAM, social engineering, common phishing forms and protection measures.
• Password and Access Management Course 10-minute cyber security awareness module teaching staff to create secure passwords, manage account access safely and use multi-factor authentication to prevent unauthorised access.
• Ransomware and Malware Course 10-minute cyber security awareness module explaining how malware spreads, warning signs to watch for, and simple actions to prevent infections, including ransomware forms, attack methods and mitigation steps.
• Mobile Device Security Course 15-minute cyber security awareness module educating staff on practical steps to use mobile devices securely and reduce the risk of cyber compromise from lost, stolen or compromised devices.
• Data Breach Course 30-minute cyber security awareness module teaching staff how breaches happen, warning signs to watch for, and steps to take if an incident occurs, including GDPR and DPA breach reporting obligations.
• Supply Chain Course 1-hour cyber security course helping staff understand third-party risks, identify vulnerabilities in supplier relationships and apply practical steps to strengthen supply chain security.
• Subject Access Request (SAR) Course 1-hour training course explaining SAR requirements under GDPR and the Data Protection Act 2018, enabling staff to respond correctly and avoid costly compliance mistakes.
• Digital Footprint Course 20-minute immersive cyber awareness course helping learners explore digital footprints, recognise how personal information spreads online and take practical steps to protect their privacy.
• Agent Cyber Awareness Course 45-minute youth-focused eLearning course using Agent Cyber characters and interactive storytelling to teach young learners how to stay safe online and recognise cyber threats.
• Cyber Secure At Home Course 10-minute cyber security awareness module teaching staff how to stay cyber secure at home, covering safe Wi-Fi, device security, password management, multi-factor authentication and remote working best practices.
• Cyber Risk Management Course 1-hour introductory eLearning course for Senior Managers and Leaders covering cyber risk vs enterprise risk, governance, assessment, reporting and monitoring using the GARM model. Produced in partnership with Cyber Risk Management Group.
• LMS SCORM Packages Annual subscription packages of OSP courses delivered as SCORM 1.2, SCORM 2004, AICC, Tin Can API and cmi5 files for upload to a customer's own Learning Management System, licensed for unlimited users over a 12-month period.
• Classroom and Virtual Training Instructor-led NCSC-assured training courses delivered in-person or virtually, including Cyber Security Awareness, GDPR Awareness, GDPR Practitioner and 8+ additional courses at awareness and practitioner levels.
• Escape Room Training Interactive escape room-style cyber security training experiences that engage staff in security awareness through gamification.
• Data Protection Training as a Managed Service Managed NCSC-assured GDPR training service for organisations, delivering bespoke online, workplace or virtual sessions and workshops tailored to client requirements.
• Cyber/Information Security Training as a Managed Service Managed NCSC-assured Cyber Security and Information Security training service at awareness level, providing bespoke online, workplace or virtual sessions and workshops tailored to specific organisations.
• Data Protection & GDPR Consultancy External advisory services helping organisations prepare for and comply with Data Protection and GDPR requirements, including audit, interactive workshops and development of policies and procedures.
• GDPR Discovery Audit Strategic assessment of GDPR compliance and development of a high-level roadmap to compliance, helping governing bodies align Data Protection and GDPR across the organisation.
• Data Protection Impact Assessment (DPIA) Methodology, training and consultancy to help organisations conduct DPIAs using a contextual risk-based approach, developing Risk Treatment Plans across Identify, Protect, Detect, Respond and Recover capabilities.
• Outsourced Data Protection Officer Complete outsourced DPO service tailored to client needs and budget, providing assistance to monitor internal compliance, advise on Data Protection obligations, conduct DPIAs and report to highest management level.
• ISO 27001 Consultancy Information Security Management System consultancy including gap analysis, internal audit, micro ISMS implementation and full ISMS implementation with Stage 1 and Stage 2 support.
• Cyber Risk & Resilience Consultancy Strategic advisory services addressing cyber, digital and technology risks with wider business resilience considerations including reputational, operational, supply chain and financial impacts, delivered through awareness, education, scenario workshops and independent governance analysis.
• Scottish OT Cyber Summit Annual summit focused on Operational Technology cyber resilience featuring expert speakers, networking and immersive sessions on protecting people, services and infrastructure from cyber attacks, with delegate tickets and Platinum/Gold sponsorship packages.

Quantifiable outcome

• Certificate validity of 12 months from issue, with course access valid for 6 months from purchase — ensuring regular refresh cycles for compliance.
• +2 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Feature5 records

Partnerships

15 partnerships are on record, tiered minor and core.

• iESE (improving evidenced selection for employers) / CCoEminorStrategic or Co-development Partner · 19 April 2023iESE (also referred to as CCoE - Cyber Centre of Excellence) teamed up with OSP to deliver NCSC-assured training. The CCoE is also listed as a Strategic Partner for the Scottish OT Cyber Summit. COO Irene Coyle participated in a CCoE webinar on cyber training.
• Wood & Robert Gordon University (RGU)coreStrategic or Co-development Partner · 22 October 2022OSP Cyber Academy joined forces with Wood (a global consulting and digital solutions company) and Robert Gordon University (RGU) to develop and deliver cyber behaviour change training programmes. This collaboration was covered in an October 2022 blog post.
• Cyber PrismcoreStrategic or Co-development PartnerCyber Prism is an industrial cyber security expert firm and the co-development partner for the OT Cyber Security Awareness course. The course author is a highly experienced OT cyber security professional and Fellow of the British Computer Society. Cyber Prism also serves as a CNI Technology Partner for the Scottish OT Cyber Summit.
• 2020 PartnersminorStrategic or Co-development PartnerWorking in partnership with 2020 Partners, a consultancy operating across diverse business environments.
• CelerityminorChannel Partner/ Reseller/ DistributorCelerity is a UK IT infrastructure provider that has worked in partnership with OSP to deliver security awareness training to its clients.
• FMCI (FMLI)minorStrategic or Co-development PartnerListed as a working in partnership entity. FMCI (also shown as FMLI) appears on the OSP Partners page.
• Aliant (Aliant Law)minorStrategic or Co-development PartnerAliant Law is a specialist law firm listed as working in partnership with OSP Cyber Academy.
• TAAPminorChannel Partner/ Reseller/ DistributorTAAP is a training and professional services organisation that has purchased OSP courses and is listed as a working in partnership entity. Also a platinum affiliate partner.
• Escone SolutionsminorChannel Partner/ Reseller/ DistributorEscone Solutions is a consultancy listed as working in partnership with OSP and has provided testimonials for OSP training services.
• APMG InternationalcoreStrategic or Co-development PartnerAPMG International is the certification body that externally assures OSP's training courses under the NCSC Assured Training Scheme. OSP courses carry the APMG International and swirl device logo and are assured against CyBOK.
• National Cyber Security Centre (NCSC)coreStrategic or Co-development PartnerThe NCSC is the UK Government's national computer security agency. OSP's training courses are assured through the NCSC Assured Training Scheme administered by APMG International. The NCSC Certified Training scheme is referenced on course pages.
• SikerminorStrategic or Co-development PartnerSiker is listed as a course delivery partner on shop pages for NCSC-certified courses including ICS Security Incident Response Fundamentals, ICS Practitioners Security, and Industrial Control System Security Practitioner.
• Cyber Risk Management GroupminorStrategic or Co-development PartnerThe Cyber Risk Management Course was produced in partnership between OSP Cyber Academy and Cyber Risk Management Group. The course author has over 20 years of cyber risk management experience and authored a leading cyber risk assessment methodology.
• TekgemminorStrategic or Co-development PartnerListed as a Strategic Partner for the Scottish OT Cyber Summit. Tekgem is shown in the summit's partner logo section.
• CNG (Communication Networks Group)minorOthersListed as 'Powered by' for the Scottish OT Cyber Summit. CNG appears in the summit's partner section and may relate to event infrastructure or venue support.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• KnowBe4: Global leader in security awareness training and simulated phishing, with a vast content library and enterprise LMS platform. Directly comparable to OSP's staff awareness eLearning and phishing courses, though OSP differentiates via UK NCSC assurance and OT focus.
• SANS Institute: Worldwide provider of cyber security training, certifications, and research. Comparable to OSP's classroom/virtual instructor-led training and practitioner-level courses (e.g., ICS/OT security), though SANS operates at a much larger global scale.
• OneTrust: Global privacy, security, and governance technology platform with training modules for GDPR and data protection. Listed as a working partner of OSP but also a competitor in compliance training and broader GRC services.

Direct peers

• Phished: European (Belgian) security awareness training provider offering phishing simulations and eLearning for SMBs and mid-market. Highly comparable in target customer, delivery model, and product scope to OSP's awareness courses.
• CybSafe: UK-based cyber security awareness and behaviour analytics platform. Directly comparable as a UK-headquartered awareness training competitor, with strong overlap in compliance-driven training and enterprise SaaS delivery.
• Clarity Compliance (formerly Central Compliance): UK GDPR and data protection training and consultancy provider offering eLearning and managed services. Comparable to OSP's GDPR staff awareness, practitioner training, and outsourced DPO/consultancy services.
• IT Governance: UK-based provider of cyber security and data protection training, ISO 27001 consultancy, and compliance services. Closely comparable to OSP across training catalogue, ISO 27001 consultancy, and GDPR/DPO offerings.
• Siker (Siker Training): UK NCSC-certified training provider delivering ICS/SCADA and OT cyber security courses. Listed as an OSP course delivery partner but also a competitor in the OT cyber training segment OSP targets.

Emerging players

• Tessian: UK-based human layer security platform addressing email security and behavioural risks. Comparable in addressing the people-side of cyber risk, though Tessian focuses on detection rather than training content delivery.
• Hut Six: UK-based security awareness training platform focused on engaging, compliance-aligned content. Comparable to OSP in offering modular awareness training with an emphasis on regulatory alignment, though smaller in scale.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/OSPcyberacademy
• YouTubeyoutube.com/channel/UCsWyl7VLp7tdw5X32aUOsLw
• Facebookfacebook.com/OSPCyberAcademy
• LinkedInlinkedin.com/company/operationalsecurityprofessionalsgrouplimited

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about osp cyber academy