Skip to content

HEALTH
Defence
AI
Assurance
Resources

SECURING DIGITAL HEALTH, HEALTH TECH AND MEDICAL DEVICES

Digital Health and Medical Device Security Specialists

Digital Health and Medical Device Security Specialists We help clients meet FDA, EU MDR, ISO 27001, and Cyber Essentials requirements in addition to offering External Audits for NHS DSPT submissions. Services also include penetration testing, risk assessments, and incident response

0

PEOPLE’S SENSITIVE INFORMATION
SECURED THROUGH OUR SERVICES

0

COUNTRIES WE’VE SECURED
APPLICATIONS AROUND THE GLOBE

0

SUCCESS RATE FOR
SECURITY AUDITS

Specialising In:

Cybersecurity for Essential Services and Critical Suppliers | Medical Cybersecurity | ISO 27001 | Medical Device Penetration Testing | Cyber Essentials | EU MDR Support | FDA 510(k) Support | IEC 62304 Compliance | Digital Therapeutics Security | Mobile Health App Testing | AI/ML Medical Device Validation

Our Clients

Trusted by essential services, critical suppliers and organisations across health, technology and digital services.

Testimonials

“Periculo assisted with our DSPT audit requirements. They were able to quickly understand our needs, the proposal met the brief and a detailed project plan was produced.

The process was well supported by the team and we gained a successful outcome.”

MIKE // MULTI-HEALTH SYSTEMS

“Periculo assisted with our DSPT audit requirements. They were able to quickly understand our needs, the proposal met the brief and a detailed project plan was produced.

The process was well supported by the team and we gained a successful outcome.”

MIKE // MULTI-HEALTH SYSTEMS

“Periculo assisted with our DSPT audit requirements. They were able to quickly understand our needs, the proposal met the brief and a detailed project plan was produced.

The process was well supported by the team and we gained a successful outcome.”

MIKE // MULTI-HEALTH SYSTEMS

Latest Insights

All Articles →

DSPT 2026-27: The 12 Mandatory Audit Areas for IT Suppliers

DSPT 2026-27: The 12 Mandatory Audit Areas fo...

What is the DSPT 2026-27 audit for IT suppliers? On 1 October 2026, NHS England published the mandatory audit scope for ...

DCC Levels 0–3 Requirements Explained: When Are In-Person Site Visits Needed?

DCC Levels 0–3 Requirements Explained: When A...

When preparing for the Defence Cyber Certification (DCC) as an industry partner for the UK Ministry of Defence (MOD), on...

Does DSPT Require Penetration Testing?

Does DSPT Require Penetration Testing?

What Every Organisation Needs to Know Under Data Security Standard 9 (IT Protection), assertion 9.2 requires an annual p...

CAF v4 in the DSPT: What NHS England's Cyber Framework Actually Means for Your Toolkit

CAF v4 in the DSPT: What NHS England's Cyber ...

DSPT version 9 for 2026-27 is built on version 4.0 of the NCSC's Cyber Assessment Framework (CAF). But "aligned to CAF v...

What Is the EU Cyber Resilience Act (CRA)'s 24-Hour Vulnerability Disclosure Rule?

What Is the EU Cyber Resilience Act (CRA)'s 2...

The EU Cyber Resilience Act's 24-hour rule is a legal requirement, in force since 11 September 2026, for manufacturers o...

DSPT 2026-27 Is Live: What's Confirmed, and What IT Suppliers Are Still Waiting On...

DSPT 2026-27 Is Live: What's Confirmed, and W...

The Data Security and Protection Toolkit for 2026-27 went live on 4 September 2026. Version 9 is now aligned to the Cybe...

Tailored for Defence: Why Generic AI-Generated Policies Fail DCC Governance

Tailored for Defence: Why Generic AI-Generate...

Ask an AI assistant to write an Acceptable Use Policy, and it will produce something plausible-looking in seconds: don't...

The Rules of Engagement: What Your Certification Body Can and Cannot Do

The Rules of Engagement: What Your Certificat...

Somewhere in every DCC preparation project, a compliance officer asks a reasonable question: "Can our Certification Body...