Government and public sector
IT for government that stands up to assurance
Public sector IT is judged on evidence as much as on service. We run Mac and Windows estates for government teams, with the controls, documentation and certification that buyers and assurance teams ask suppliers to show.
The public sector IT review
- Scope agreed with you before we start
- Devices, identity, Microsoft 365 and suppliers
- Gaps against Cyber Essentials
- Where your data is held
- A written report you keep
Trusted by teams across UK government, healthcare, education, charities, financial services and global brands
The problem is rarely the technology
Most government teams already use Microsoft 365, and many run Macs alongside Windows. The hard part is proving the set-up is secure: showing an assurance team which devices are encrypted, who has admin rights, how updates are enforced and where data is stored.
When that evidence lives in one engineer’s head, every audit, contract renewal or new supplier questionnaire becomes a project. We set up your IT so the evidence comes straight from Jamf, Intune and Microsoft 365 reports, and we keep the documentation current.
Clients we can name
- Cabinet Office
- Ministry of Justice
- Ministry of Defence
- Department for Education
- NHS
Buying through G-Cloud 15
Postremo IT is a Government Commercial Agency (GCA) supplier on G-Cloud 15. GCA took over from the Crown Commercial Service on 1 April 2026, so older documents may still use the old name.
Our services are listed on the Digital Marketplace, where buyers can read the service descriptions, terms and pricing documents. See our G-Cloud listings (opens the Digital Marketplace in a new tab).
If your organisation buys another way, we can quote directly or work alongside your existing supplier through our co-managed IT service.
What public sector buyers expect, in plain English
This is a general summary of published government guidance, not legal advice. Your commercial and security teams decide what applies to each contract.
Cyber Essentials in government contracts
Procurement Policy Note 014, updated in February 2025, applies to central government departments, their executive agencies, non-departmental public bodies and NHS bodies. It replaced PPN 09/14 and PPN 09/23.
It tells those bodies to make suppliers meet technical requirements on contracts that handle citizens’ or government employees’ personal information, supply IT that stores or processes OFFICIAL information, or deal with the day-to-day business of government. The note names Cyber Essentials or Cyber Essentials Plus as the quickest way to meet those requirements. Where it is required, the certificate must be renewed every year of the contract. A supplier without it has to show equivalent controls some other way.
We prepare Mac and Windows estates for Cyber Essentials and Cyber Essentials Plus, and our certification partner, which is licensed by IASME, carries out the assessment.
Cloud security
The National Cyber Security Centre (NCSC) publishes 14 Cloud Security Principles, covering areas such as protecting data in transit, asset protection, identity and authentication, and audit information for customers. Assurance teams often use them to review cloud services. We map your Microsoft 365 and device management set-up against them, and record where your own configuration matters.
Where your data is held
For Microsoft 365 tenants set up in the United Kingdom, Microsoft’s Product Terms commit to storing core data at rest, including Exchange Online mailboxes, SharePoint, OneDrive and Teams, in the UK. We check your tenant’s data location, document it, and flag any services or add-ons that fall outside that commitment.
OFFICIAL, not SECRET
Our work covers information at the OFFICIAL level. Government guidance requires designated secure IT systems for SECRET and TOP SECRET information, and we do not provide those systems.
What we do for public sector teams
The same managed IT and consultancy we provide to every client, set up so you can show your work.
Devices you can account for
- Macs managed with Jamf Pro
- Windows managed with Intune and Autopilot
- Encryption and update status on demand
- Secure disposal with records
Identity and access
- Microsoft Entra ID and MFA everywhere
- Conditional access for managed devices
- Admin rights removed from daily accounts
- Joiners, movers and leavers handled to an agreed process
Evidence and documentation
- Cyber Essentials and Plus preparation
- Answers to supplier security questionnaires
- Configuration and data location records
- Reports from Jamf, Intune and Microsoft 365
Frequently asked questions
Can’t see your question? Call us on +44 20 7550 9103 or book a call.
Is Postremo IT on G-Cloud?
Yes. Postremo IT is a Government Commercial Agency (GCA) supplier on G-Cloud 15, and our services are listed on the Digital Marketplace. Buyers can find them by searching for Postremo IT in the G-Cloud 15 cloud support lot. We also hold Cyber Essentials and Cyber Essentials Plus.
Do government suppliers need Cyber Essentials?
For many central government contracts, yes. PPN 014 tells in-scope bodies to require Cyber Essentials, Cyber Essentials Plus or equivalent controls on contracts that handle personal information, OFFICIAL information or the day-to-day business of government.
Can you help our organisation get Cyber Essentials Plus?
Yes. We find and fix the gaps across Mac, Windows, mobile and Microsoft 365, then take you through assessment with our certification partner, which is licensed by IASME.
Is our Microsoft 365 data stored in the UK?
For tenants set up in the United Kingdom, Microsoft commits to storing core Microsoft 365 data at rest in the UK. We check and document your tenant’s actual data location as part of a review.
Do you support Macs in government?
Yes. We manage Macs, iPhones and iPads with Jamf, and Windows with Intune, so one team can evidence every device. Encryption, update and admin-rights reports come straight from Jamf, Intune and Microsoft 365, so an assurance team sees the same evidence for a Mac as for a Windows PC.
How is the work priced?
Buyers on G-Cloud can see our pricing documents on the Digital Marketplace. Otherwise we quote a fixed price for an agreed scope. Managed IT is a fixed monthly fee per device, from £25 per device per month, excluding VAT and licences. See pricing.
Book a public sector IT review
Tell us what your buyers and assurance team ask for. We will agree the scope with you and show you where your IT stands against it.
London head office
Postremo IT Limited
Level 24, One Canada Square
Canary Wharf
London E14 5AB
+44 20 7550 9103
info@postremoit.com
Also in Dubai
Business Bay, Dubai