Capability
Cyber security
Understand what you are exposed to, and fix the things that matter first.
Security work aimed at the risks that would actually hurt: how the estate is exposed, how identity and access are handled, what your suppliers bring with them, and whether you could detect and recover from a serious incident.
Disciplines
- Security architecture
- Identity & access
- Information assurance
- Governance, risk & compliance
The questions
What this work is for
Engagements in this area are shaped around a small number of questions. If these are the ones your organisation is stuck on, we are probably useful.
- 01
What would a serious incident here actually cost us?
- 02
Who has access to what, and who approved it?
- 03
Would we detect this, and how quickly?
- 04
What risk are our suppliers bringing with them?
Engagement shapes
How this is usually structured
Security architecture and posture reviews
Identity and access management
Compliance and certification readiness
Incident readiness and recovery planning
What you hold at the end
Deliverables
A prioritised view of exposure, worst first, with what it costs to fix
Controls that are actually operated, not just documented
A recovery plan someone has tested rather than written
Where this applies
Sectors we support with this work
Also relevant
Other capabilities
- Technology strategy & architectureDecide where your technology is going, with the reasoning written down.
- Cloud & infrastructureRun your platforms on something you can change safely.
- Data & analyticsTurn the data you already have into decisions you can defend.
- Artificial intelligencePut AI where it earns its place, and prove it before you scale it.
- Software engineeringGet the thing built, and leave your team able to keep building it.
Start here
Bring clarity to your next challenge.
Tell us what your organisation is facing. If we are the right team to help, we will say how. If we are not, we will say that too.