Services

Cyber risk needs a senior owner. Most mid-sized organisations struggle to justify a full-time Chief Information Security Officer (CISO).

One of our experienced cyber risk professionals acts as your CISO for a set number of hours each month. We set the strategy with you and build the roadmap. Your IT team or managed service provider (MSP) runs the technology. We use their data to track key risk indicators and report them to your board.

Your board is informed. You are managing cyber risk.

What would you like to strengthen?

Virtual CISO retainer Security program oversight

Book a call

Security decisions need evidence.

We identify and analyse your risk exposure, assess and prioritise your controls, and help you estimate your return on security investment (RoSI).

You know where you stand. You have a roadmap you can fund.

What would you like to strengthen?

Risk assessment Controls testing Supply chain risk Security investment review Assurance Accelerator (including Essential 8, SMB1001, ISO 27001, CPS 234, VPDSF and more) Data governance AI risk assessment

Book a call

Disruption will happen. Prepare first.

We quantify the cost of your downtime, write your continuity, incident response and disaster recovery plans, and rehearse them with your team.

Your plans are tested. Your people know what to do.

What would you like to strengthen?

Business impact analysis Business continuity plan Incident response plan Disaster recovery plan Response exercises: dry run, tabletop or simulation

Book a call

Online training teaches the rules. People learn more by doing.

We build on your existing online training with interactive staff workshops, board and executive sessions, and hands-on activity sessions, using examples from your work.

Your staff spot threats and act. Your leaders know their role.

What would you like to strengthen?

Staff workshops Board and executive sessions Hands-on activity sessions Tailored training program

Book a call