Each of the fourteen is a bounded engagement you can commission on its own, with defined scope, defined outputs, and senior delivery. Reviews and diagnostics establish your position before any programme commitment. Design engagements set out the capability you need, and phased engagements lead its delivery alongside your teams.
Stage 1 · 8 engagements
Establish your position
Reviews and diagnostics establish your position before any programme commitment.
Stage 2 · 6 engagements
Design and deliver the change
Design engagements set out the capability you need, and phased engagements lead its delivery alongside your teams.
Cyber Risk and Security Assurance
An independent risk opinion on one system, cloud service, or architecture, with conditions for approval and the residual risk stated plainly.
Cybersecurity Governance and Board Advisory
How your board oversees cyber risk today, and what would need to change to satisfy directors and regulators, closing with a facilitated board workshop.
Cybersecurity Governance and Board Advisory
Executives rehearse the decisions a real incident would force, against a scenario built on your critical services, ending in an improvement plan.
Regulatory Cyber Resilience
Five days, six defined outputs. Scope, gap, and governance readiness before any programme investment, with a readiness brief for the management body.
Regulatory Cyber Resilience
Which supplier relationships carry material cyber risk, where concentration sits, and what the contracts and due diligence need to change.
Cloud and Digital Security Governance
Whether cloud security governance operates in practice, covering ownership, policies, and exceptions, and what needs fixing first.
Zero Trust Strategy and Transformation
Maturity, priority use cases grounded in business risk, and a phased roadmap with investment priorities, before any technology commitment.
AI Governance and Transformation
Where AI use already exists across your organisation, including use nobody formally approved, what it is missing, and what to build first.
Cyber Risk and Security Assurance
A cyber risk management framework aligned with your enterprise risk framework, so cyber risk is assessed and reported on the same basis as other material risks.
Cybersecurity Governance and Board Advisory
A cyber governance framework that sets decision rights, accountability, and board oversight, aligned with management body obligations.
Regulatory Cyber Resilience
A funded NIS2 programme designed from your diagnostic findings and delivered in agreed phases, with evidence for supervisory review.
Cloud and Digital Security Governance
A governed cloud foundation designed around your organisation, with a staged plan to bring your estate onto it without disrupting live services.
Zero Trust Strategy and Transformation
A phased transformation led by independent architects and programme governors, starting with a pilot on a high-priority service, each phase agreed in advance.
AI Governance and Transformation
An AI factory designed around your priorities, with a phased transformation plan, named owners, and investment decision points.
Start the conversation
We use analytics cookies to understand how this site is used. See our Privacy Notice for details. You can change your choice at any time.
