---
title: "Carnegie Trust Case Study: Cyber Essentials Certification"
description: Grant McGregor helped the Carnegie Dunfermline Trust achieve Cyber Essentials, raise security standards, improve user awareness and simplify renewals.
image: https://grantmcgregor.co.uk/hubfs/Carnegie_Trust_Dunfermline-3.jpg
---
[](https://www.grantmcgregor.co.uk/)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
[Contact Us](https://grantmcgregor.co.uk/contact-us)
[Home](https://grantmcgregor.co.uk/) / [Case Studies](https://grantmcgregor.co.uk/case-studies) / Carnegie Trust Case Study: Cyber Essentials Certification
CASE STUDY / The Carnegie Dunfermline Trust
# Securing a Historic Legacy with Cyber Essentials
*Photo credit: Alex Beattie*
CLIENT The Carnegie Dunfermline and Hero Fund Trust
SERVICE USED Cyber Essentials Certification and Annual Renewal
LOCATION Dunfermline, Scotland
## About **the Trust**
The Carnegie Dunfermline and Hero Fund Trust is an endowment trust established by philanthropist Andrew Carnegie in 1903 to enrich the lives and environment of the Dunfermline community where he was born and raised.
One of more than 20 Carnegie foundations worldwide, it is governed by a Royal Charter and a Board of twenty Trustees.
Today, the Trust brings together three charitable purposes under one organisation. The Dunfermline Trust awards grants to local charities and organisations across arts, education, sport and community projects. The Hero Fund recognises civilian acts of bravery across the UK, and the Trust also runs the Andrew Carnegie Birthplace Museum, preserving the legacy of one of Scotland’s most influential philanthropists.
## The **Challenge**
With responsibility for sensitive data and GDPR compliance, the Trust aimed to strengthen its cyber security posture and reduce the risk of cyber attacks.
Trustees also wanted to minimise the organisation’s exposure to cyber risk and qualify for lower cyber insurance premiums by completing the accreditation.
Although the Trust already partnered with Grant McGregor for day-to-day IT support, Cyber Essentials initially felt complex for a small internal team. They needed a clear, supported route to certification that would improve security without adding pressure.
## Our **Solution**
Grant McGregor provided a guided, clear route to Cyber Essentials certification and annual renewal:
- One-to-one guidance from our NCSC Assured Cyber Advisor, translating requirements into clear, actionable steps.
- Policy and documentation support to align existing practices with the scheme.
- Practical security improvements, including a password manager, multi-factor authentication (MFA) and structured software and device updates.
- User awareness training with phishing simulations and regular tips to build everyday vigilance.
- Renewal support each year, explaining question set updates and highlighting areas needing attention.
## **Our Approach and Results**
The process was designed to be straightforward and supportive, raising security standards while keeping the workload manageable for a small team.
### Improved Security
Stronger policies, a password manager and enforced updates on all devices used for work.
### Better IT asset management
Retiring devices at end of warranty or support to reduce vulnerabilities and unexpected costs.
### User awareness and confidence
Staff recognise phishing attempts, understand incident response steps and feel prepared to handle cyber risks.
### Stress-Free Certification
Clear, guided support removed the technical overwhelm and made achieving Cyber Essentials simple.
### Simplified Renewals
Each year’s changes are explained early, cutting confusion and speeding up submission.
### Long-Term Value
A stronger security posture and eligibility for discounted cyber insurance.
## In Their **Words**
 
 
I would definitely go through Grant McGregor instead of trying to do it alone. They make Cyber Essentials efficient, straightforward and stress-free. They answer the technical questions we wouldn’t have known ourselves. It’s been five-star support.
**Sarah Huxtable**
Administrator, Carnegie Dunfermline Trust
Premium IT Services Tailored for Leading Brands
[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)
Quick Links
- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
Services
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
Edinburgh – Chesterfield
[0131 603 7910](tel:+441316037910)
[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)
**Main Office:**
The Merchants' Hall,
22 Hanover St,
Edinburgh EH2 2EP
© 2026
Grant McGregor. All rights reserved.
[Privacy and Cookie Policy](https://grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor Team",
"url" : "https://grantmcgregor.co.uk/case-studies/author/grmc-team"
},
"dateModified" : "2026-08-05T15:04:11.823Z",
"datePublished" : "2025-11-06T07:00:30.000Z",
"headline" : "Carnegie Trust Case Study: Cyber Essentials Certification",
"image" : [ "https://grantmcgregor.co.uk/hubfs/Carnegie_Trust_Dunfermline-3.jpg" ],
"mainEntityOfPage" : {
"@id" : "https://grantmcgregor.co.uk/case-studies/carnegie-trust",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
},
"name" : "Grant McGregor"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://grantmcgregor.co.uk/",
"@type" : "LocalBusiness",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Edinburgh",
"postalCode" : "EH2 2EP",
"streetAddress" : "22 Hanover Street"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 55.9526313,
"longitude" : -3.1970679
},
"image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
"name" : "Grant McGregor",
"openingHoursSpecification" : {
"@type" : "OpeningHoursSpecification",
"closes" : "18:00",
"dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
"opens" : "08:00"
},
"sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
"telephone" : "+441316037910",
"url" : "https://grantmcgregor.co.uk/"
}
```