IT GOVERNANCE LIMITED

1. Industry Classification

IT Governance Limited operates within the Information Technology Services sector, specifically classified under SIC code 62090 (Other information technology service activities). More precisely, the company is a niche player within the Governance, Risk, and Compliance (GRC) sub-sector, providing cyber security consultancy, training, publishing, and compliance frameworks such as ISO 27001 and Cyber Essentials. The GRC market is characterized by high knowledge intensity, regulatory-driven demand cycles, and a blend of productized services and traditional consulting. Companies in this space typically operate with high gross margins due to the value-added nature of intellectual property and advisory services, though they often carry significant administrative overheads related to specialized talent acquisition and content development.

2. Relative Performance

For the financial year ending March 2017, IT Governance Limited demonstrated performance metrics that significantly outpace typical SME benchmarks in the IT services sector: * Revenue Growth: The company achieved a turnover of £6.76 million, representing a staggering 40.6% increase from the restated £4.81 million in FY2016. Typical IT services firms at this scale generally achieve single-digit to low-double-digit growth; therefore, this growth rate indicates a company capitalizing on a major market inflection point. * Profitability: The gross profit margin stands at an impressive 59.5% (£4.02m), a metric consistent with top-quartile GRC providers that successfully blend consulting with scalable products like training and publishing. Operating profit reached £839,563 (a 12.4% operating margin), and profit before tax hit £807,562. While the operating margin is slightly lower than the gross margin would suggest—reflecting heavy administrative investment (£3.24m)—the 156% year-on-year leap in operating profit showcases strong operational gearing. * Liquidity & Capital: Historically, the company showed net current liabilities of £670,579 in FY2016, which narrowed dramatically to £155,067 in FY2017. Cash generation was particularly robust, with cash at bank surging from a perilous £11,179 to £376,827. This rapid improvement in working capital and cash conversion is a hallmark of a business scaling efficiently through a high-demand cycle.

3. Sector Trends Impact

The financial performance of IT Governance Limited is inextricably linked to the macro-regulatory environment of the period: * GDPR Preparatory Boom: The FY2017 period (April 2016 - March 2017) was the height of the GDPR compliance panic. With enforcement looming in May 2018, UK and international organizations were heavily investing in data protection impact assessments, DPO advisory services, and documentation—exactly the services IT Governance provides. The directors' report explicitly notes that "cyber security and data protection requirements in growing numbers of organisations... have fuelled demand." * Cyber Essentials & Supply Chain Assurance: Beyond GDPR, there was a marked increase in UK businesses seeking Cyber Essentials certification, often mandated as a prerequisite for public sector and supply chain procurement. This trend favors integrated GRC providers that can offer both the consulting framework and the certification validation. * Consolidation and Group Structure: The PSC register indicates that GRC International Group Plc owns over 75% of the company, with founder Alan Calder holding significant sway. This corporate structure reflects a broader industry trend where standalone GRC consultancies are rolled into larger groups to offer end-to-end, tier-one cyber resilience services.

4. Competitive Positioning

• Position: IT Governance Limited is a recognized niche leader and specialist challenger in the UK cyber compliance market. Unlike generalist IT support firms that offer compliance as an add-on, IT Governance is a pure-play GRC provider with strong brand recognition built through its publishing and training arms.
• Strengths: The company's blended delivery model—combining book distribution, e-learning, and bespoke consultancy—creates multiple revenue touchpoints with clients and drives the aforementioned superior gross margins. The massive reduction in net current liabilities and the elimination of the prior year's P&L deficit (retained earnings moved from a £635k deficit to a £44k deficit) demonstrate a fundamental strengthening of the balance sheet.
• Weaknesses/Risks: Despite improvements, the company still carries net current liabilities (£155k), meaning it remains reliant on ongoing cash generation and potentially director/shareholder support (as noted in the going concern basis of preparation) to meet short-term obligations. Furthermore, the restatement of prior year figures (a £20.7k prior year adjustment and a revaluation reserve elimination) suggests a historical complexity in financial reporting or group restructuring that required correction. Additionally, as a "Small" accounts filer taking audit exemptions, the depth of public financial transparency is limited, and the business remains highly exposed to the cyclical nature of regulatory compliance spending; once GDPR compliance becomes business-as-usual, sustaining a 40% growth rate will be challenging without pivoting to ongoing managed services.