Practice area

Cyber Security consultancy

Security management systems, control frameworks and technical assessment.

Standards in cyber security

Prefer to just ask someone about cyber security rather than fill in a form?

What cyber security is worth to you

Deals that close faster

A completed security review removes the longest delay in enterprise procurement.

Breach cost avoided

Controls that are tested rather than assumed are what stop an incident becoming a crisis.

Client trust made visible

Certification answers the security questionnaire before it is even sent.

Insurability

Cyber cover is priced on demonstrable controls, and increasingly refused without them.

Why expert advice is worth having

1

Self assessment is generous

Everyone marks their own cyber security homework kindly. An outside gap analysis tells you the uncomfortable part while it is still cheap to fix rather than three weeks before the audit.

2

The standard says what, never how

cyber security is written to apply to every organisation on earth, which is exactly why it never tells you what to do in yours. Turning a clause into your process, on your sites, with your people, is the actual work.

3

Someone has to own the detail

cyber security generates a large amount of small, unglamorous work. Left to whoever has a spare afternoon it drifts for months. Given an owner with a plan it takes weeks.

4

Scope decides the price

Getting the cyber security scope wrong is expensive in both directions. Too wide and you pay for audit days you never needed. Too narrow and the certificate does not cover what your customer asked about.

Insights, news and know-how

Four kinds of writing, each in its own column.

All articles →

Blogs22

Working notes from the consultants.

Articles

Longer pieces on one subject.

Nothing here yet. Anything published as articles appears in this column.

Knowledge base

How things are actually done.

Nothing here yet. Anything published as knowledge base appears in this column.

Talk to us about cyber security

Tell us who is asking and by when, and we will map the shortest compliant route.