Lybica Atlas
The living map.
One place holding your assets, controls, risks, suppliers and continuity plans — current, rather than eighteen months stale.
The problem
The evidence exists. It is just in nine places.
A spreadsheet of controls somebody started. A policy set nobody has read since it was written. A supplier list that predates two of your suppliers. A continuity plan that has never been tested. Each of them was correct on the day it was made.
Then a two-hundred-question security questionnaire arrives with a bid deadline attached — and the work is not answering it, it is finding out what is still true.
Enter it once. Use it three ways.
Atlas holds a single core record of your assets, controls, risks and suppliers, with three modules built on top of it — each useful on its own, all drawing on the same map.
-
Compliance Manager
Overlapping frameworks mapped once, answered once, evidenced once. Cyber Essentials, Def Stan 05-138, the DSPT, the Cyber Assessment Framework and ISO 27001 stop being five projects and become five views of the same control set.
-
Supplier Assurance
Your suppliers, their risk position, and the flow-down obligations you carry — maintained rather than assembled in a panic. Named to match the Supplier Assurance Questionnaire your buyers already send you.
-
Continuity Planner
Continuity and recovery plans that exist, and get exercised. An assessor asking whether you have tested yours is asking for a record, not a document.
Where the AI helps
A map that reads itself.
Atlas's AI checks each control answer against what the standard actually requires — not just that a box was filled in. It cross-references the whole assessment, so “MFA is enforced everywhere” in one section is flagged the moment an exception appears in another. It ranks the gaps, so you get what-to-fix-first rather than a flat checklist. And it drafts the evidence narrative, which a person then reviews before it goes anywhere.
What you get.
- One source of truth for your assets, controls, risks, suppliers and plans — with an owner and a date against each.
- Questionnaires answered in hours instead of weeks, because the answers are already written and already evidenced.
- An assessment that becomes a formality, because the evidence existed before the assessor asked for it.
Honest scope
We get you ready. We do not certify you.
Lybica is not a certification body. Certificates — Cyber Essentials, Cyber Essentials Plus, Defence Cyber Certification, ISO 27001 — are issued by the relevant certification body, and never by us. What we do is prepare you for the assessment, produce the evidence it asks for, and keep that evidence current so the assessment itself is a formality.
Pricing
Atlas is included at every tier.
The entry point is £300 a month plus VAT — Compliance Manager on one framework, plus Supplier Assurance — on an annual term billed monthly. Higher tiers add every framework, Continuity Planner, and then Crucible and Vigil on top.