Advisory
Senior leadership for security and compliance
Senior technology and security leadership, accountable to your board and scoped to what a review of your posture finds.
Services
Five engagements
vCISO EssentialsSecurity leadership, run as a discipline and reported to the board.
vCIO StrategyA three-year technology roadmap the business can fund.
ISO 27001 Readiness SprintFrom the first customer request to audit day, worked in AssureDesk.
Data Protection ReadinessReady for the data protection law that applies to you.
Incident ReadinessA tested plan, and a team to call when it is needed.
How an engagement runs
The same five steps, every time
01Readiness callThirty minutesWhat your customers, board or regulators are asking for, and whether we are the right team to help.
02Due diligenceYour real postureWe review your environment and measure where you stand today.
03Scoped planAgreed in writingWhat to address, in what order, and the leadership it needs, before work begins.
04We leadYour CIO and CISOOversight, controls, framework readiness, vendor and incident governance.
05Board reportingOn a set cadenceOne view of posture and risk, in terms the board can act on.
Every statement to a client, a board or an auditor rests on evidence.
Advice from people who have run enterprise governance, risk and compliance programmes.
The scope follows what the review finds, not a fixed package.
Your acceptance and your auditor's conclusion stay separate. Conflicts are disclosed.
Pro bono advisory for non-profit organisations
Non-profit organisations handle sensitive data and face the same threats as any business, usually with fewer resources. Registered non-profits can access our advisory at no fee. Tell us about your organisation and what you need, and we will confirm eligibility and scope with you.
- A readiness conversation with a senior practitioner
- A review of your security and data protection posture
- A prioritised plan your team can put into practice