Services
From the boardroom to the build.
Eight service areas, delivered by the same senior team. Start with the one that fits what you are facing today, or combine them into a programme.
Start with your situation
We need ISO 27001, Cyber Essentials, DCC or PCI DSS
Audit, certification and compliance →
We don’t have a security lead
Cyber strategy and leadership →
We’re a public body facing CAF or GovAssure
Public sector assurance →
A customer sent us a security questionnaire
Third-party and supply chain risk →
01 / 03
Lead and decide
For leaders who need a clear direction, an honest view of risk and decisions that hold up.
01
Cyber strategy and leadership
Direction your board can stand behind.
- Virtual and fractional CISO
- Security strategy and roadmap
- Board and committee reporting
02
Cyber risk management
See your exposure clearly, then reduce it.
- Cyber risk assessments
- Risk registers and treatment plans
- Cyber insurance readiness
08
Cyber due diligence
Know the cyber risk you are buying.
- Pre-deal cyber due diligence
- Red-flag reports for deal teams
- 100-day post-deal security plans
02 / 03
Prove and comply
For organisations that have to show customers, regulators and auditors that security works.
03
Audit, certification and compliance
Pass the audit. Then keep passing it.
- Certification and assessment readiness
- Internal and independent audits
- Continuous compliance support
04
Public sector assurance
Meet the standard government expects.
- NCSC CAF assessments
- GovAssure preparation
- NHS DSPT submissions
05
Third-party and supply chain risk
Your security is only as strong as your suppliers’.
- Supplier criticality tiering
- Supplier security assessments
- Answering customer questionnaires
03 / 03
Build and withstand
For teams building new services, and for the day something goes wrong.
06
Cloud and secure by design
Build it secure, and prove it before go-live.
- Security architecture review
- Cloud security posture assessments
- Threat modelling
07
Security testing and resilience
Know how you would hold up, before it matters.
- Penetration testing
- Incident response plans
- Tabletop exercises for leadership
+
Ongoing advisory
Security leadership that stays with you.
A senior expert close to your team after the first report: retained vCISO, quarterly risk reviews, board packs and continuous compliance.
Frameworks we support
ISO/IEC 27001 · PCI DSS · Cyber Essentials · DCC · NIST CSF · NCSC CAF · UK GovAssure · UK Secure by Design
How every engagement works
Security experts, not account managers.
Independent
No products or managed services to sell.
Senior-led
The expert who scopes your work delivers it.
Proportionate
Scaled to your size, budget and risk appetite.
Transparent
Clear scopes, honest timelines, plain English.
01 Discovery call
Free, 30 minutes.
02 Proposal
Scope and fee agreed first.
03 Assess and advise
Senior-led, regular check-ins.
04 Ongoing support
We stay as long as you need.
Ways to buy
Buy the way that suits you.
Fixed-scope project
Agreed deliverables and fee before work starts.
Monthly retainer
A set number of senior days each month.
G-Cloud 15
Direct award for public sector buyers through the Digital Marketplace.
Not sure where to start?
Tell us what you’re facing. In a free 30-minute call we’ll point you in the right direction, even if that isn’t us.