Our Mission

At Positive Cyber Solutions, our mission is to deliver clear, standards-driven cyber governance that stands up to scrutiny.

We support organisations in meeting externally enforced requirements, including Cyber Essentials and ISO-aligned frameworks, through structured assessment, defensible evidence, and practical implementation. Our focus is not on generic security advice, but on building systems that operate, are documented correctly, and can be evidenced when challenged.

As a Cyber Essentials Certification Body, we assess, certify, and guide organisations through compliance with accuracy, consistency, and professional integrity. Where improvements are required, we provide clear direction aligned to the standard, not unnecessary consultancy.

Our approach prioritises risk clarity, audit readiness, and operational discipline, ensuring compliance is demonstrable and sustainable rather than theoretical.

Making Cyber Security Understandable

At PCS, we bring a distinct advantage to the cyber security industry: our ability to educate. Unlike many cyber security firms that focus solely on technical solutions, we combine deep expertise in governance, risk, and compliance (GRC) with a talent for translating complex security concepts into clear, actionable insights.

With years of teaching we have mastered the art of breaking down intricate technical subjects into easily digestible, engaging, and practical knowledge. Our approach ensures that businesses and professionals—regardless of their technical background—can understand, implement, and maintain strong security measures effectively.

Why Our Teaching Experience Sets Us Apart

Clarity & Simplicity: We turn cyber security jargon into plain English, making security accessible to all.
Engaging & Interactive: Our training sessions are practical, real-world discussions that make security relatable.
Customised Learning: We adapt our teaching methods to suit different audiences, from executives to IT teams.
Beyond Compliance: We don’t just help you tick boxes—we ensure you understand security best practices so you can implement them confidently.

Whether we are guiding organisations through Cyber Essentials certification, policy development, or risk management, our unique ability to educate and empower makes us the ideal cyber security partner for businesses that want more than just technical support—they want true understanding.

Meet the Owners

Our team consists of highly qualified and motivated professionals, who are all experts in their field. With many years of experience in the industry, they have the expertise to provide comprehensive, first-rate services to our clients.

Emma Derbi

Managing Director

Emma is a governance and cyber security consultant specialising in Governance, Risk and Compliance, ISO 27001, and Cyber Essentials certification. With over seven years’ experience in information security governance, she works with organisations that need structured, defensible systems that stand up to audit and contractual scrutiny.

Holding an Honours degree in Computer Forensics and certified in ISO 27001 Foundation and Lead Auditor, Emma combines technical understanding with practical risk management discipline. She has built and operates her own Information Security and Quality Management Systems, ensuring that the standards she advises on are implemented, evidenced, and maintained in practice.

As the Co-founder of Positive Cyber Solutions, Emma assesses, certifies, and supports organisations navigating Cyber Essentials and broader governance requirements. Her approach is evidence-led, commercially aware, and focused on clarity. Controls must operate, decisions must be documented, and compliance must be demonstrable.

Alongside her consultancy work, Emma contributes to higher education in governance and information security, maintaining a direct link between academic frameworks and industry application.

Rachael Medhurst

Director

Rachael is a digital forensics and cyber security governance specialist with over a decade of practical experience supporting organisations through investigations, compliance, and security improvement programmes. She works at the intersection of technical evidence and regulatory accountability, ensuring organisations can defend their decisions under scrutiny.

Holding both Bachelor’s and Master’s degrees in Digital Forensics, along with certifications in ISO 17025 and ISO 27001 Foundation and Lead Implementer, Rachael combines deep technical capability with structured governance discipline. Her work focuses on forensic readiness, evidential integrity, and building governance frameworks that support resilience rather than reactive response.

Rachael supports organisations in aligning incident response, investigative processes, and regulatory requirements with defensible management systems. Her approach is methodical, standards-driven, and grounded in real-world casework.

Rachael contributes to academic research in incident response, maintaining current insight into emerging investigative and governance challenges.