Each of the fourteen is a bounded engagement you can commission on its own, with defined scope, defined outputs, and senior delivery. Reviews and diagnostics establish your position before any programme commitment. Design engagements set out the capability you need, and phased engagements lead its delivery alongside your teams.
Stage 1 · 8 engagements
Establish your position
Reviews and diagnostics establish your position before any programme commitment.
Stage 2 · 6 engagements
Design and deliver the change
Design engagements set out the capability you need, and phased engagements lead its delivery alongside your teams.
Cyber Risk and Security Assurance
An independent risk opinion on one system, cloud service, or architecture, with conditions for approval and the residual risk stated plainly.
Four defined outputs · Fixed scope
Stage 1 · Establish your position
Cybersecurity Governance and Board Advisory
How your board oversees cyber risk today, and what would need to change to satisfy directors and regulators, closing with a facilitated board workshop.
Five defined outputs · Fixed scope
Stage 1 · Establish your position
Cybersecurity Governance and Board Advisory
Executives rehearse the decisions a real incident would force, against a scenario built on your critical services, ending in an improvement plan.
Four defined outputs · Facilitated exercise
Stage 1 · Establish your position
Regulatory Cyber Resilience
Five days, six defined outputs. Scope, gap, and governance readiness before any programme investment, with a readiness brief for the management body.
Six defined outputs · 5-day engagement
Stage 1 · Establish your position
Regulatory Cyber Resilience
Which supplier relationships carry material cyber risk, where concentration sits, and what the contracts and due diligence need to change.
Four defined outputs · Fixed scope
Stage 1 · Establish your position
Cloud and Digital Security Governance
Whether cloud security governance operates in practice, covering ownership, policies, and exceptions, and what needs fixing first.
Four defined outputs · Fixed scope
Stage 1 · Establish your position
Zero Trust Strategy and Transformation
Maturity, priority use cases grounded in business risk, and a phased roadmap with investment priorities, before any technology commitment.
Four defined outputs · Fixed scope
Stage 1 · Establish your position
AI Governance and Transformation
Where AI use already exists across your organisation, including use nobody formally approved, what it is missing, and what to build first.
Four defined outputs · Fixed scope
Stage 1 · Establish your position
Cyber Risk and Security Assurance
A cyber risk management framework aligned with your enterprise risk framework, so cyber risk is assessed and reported on the same basis as other material risks.
Six defined outputs · Fixed scope
Stage 2 · Design and deliver the change
Cybersecurity Governance and Board Advisory
A cyber governance framework that sets decision rights, accountability, and board oversight, aligned with management body obligations.
Six defined outputs · Fixed scope
Stage 2 · Design and deliver the change
Regulatory Cyber Resilience
A funded NIS2 programme designed from your diagnostic findings and delivered in agreed phases, with evidence for supervisory review.
Six defined outputs · Phased engagement
Stage 2 · Design and deliver the change
Cloud and Digital Security Governance
A governed cloud foundation designed around your organisation, with a staged plan to bring your estate onto it without disrupting live services.
Five defined outputs · Fixed scope
Stage 2 · Design and deliver the change
Zero Trust Strategy and Transformation
A phased transformation led by independent architects and programme governors, starting with a pilot on a high-priority service, each phase agreed in advance.
Five defined outputs · Phased engagement
Stage 2 · Design and deliver the change
AI Governance and Transformation
An AI factory designed around your priorities, with a phased transformation plan, named owners, and investment decision points.
Five defined outputs · Fixed scope
Stage 2 · Design and deliver the change
Start the conversation
We use analytics cookies to understand how this site is used. See our Privacy Notice for details. You can change your choice at any time.
