Muhammad Sohaib Roomi, founder and reviewer at BrightCert

Founder and reviewer

Muhammad Sohaib Roomi

London, United Kingdom

View Muhammad on LinkedIn

About BrightCert

Practical Cyber Essentials preparation, reviewed by a security researcher

Muhammad built BrightCert after seeing UK small businesses struggle to translate Cyber Essentials requirements into a clear plan. The product guides an organisation through 60 plain-English questions, identifies likely gaps and produces a prioritised readiness report.

BrightCert is operated by Cognumi Ltd. It is a preparation tool, not a Certification Body. Official Cyber Essentials certification is issued only through an IASME-licensed Certification Body.

Relevant experience

Credentials are included to show who reviews BrightCert's public guidance. They do not make BrightCert an official Certification Body.

  • MSc Cyber Security with Advanced Research, Distinction, University of Hertfordshire
  • EC-Council training in Digital Forensics, Ethical Hacking and Network Defense
  • Fortinet Cybersecurity Fundamentals
  • Huawei HCIP Routing & Switching

Methodology

How BrightCert guidance is produced

The aim is simple: make the scheme easier to act on without pretending readiness software can replace an official assessor.

01

Start with primary sources

BrightCert guidance is checked against current NCSC requirements and IASME scheme information. We link to those sources so you can verify important claims yourself.

02

Translate without changing meaning

The assessment turns technical requirements into questions a business owner or operations manager can answer, while keeping the five official control areas intact.

03

Separate evidence from judgement

Your answers produce a readiness score and prioritised findings. They are preparation guidance, not an assessor's certification decision.

04

Review material changes

Public guidance is founder-reviewed when the Cyber Essentials question set, requirements or official pricing changes.

Check the guidance for yourself

Our Cyber Essentials guides cite NCSC and IASME sources and show when they were last reviewed. Start with the plain-English overview, then use the free assessment when you want a view of your own readiness.