Engagements

Start with a defined engagement.

Each of the fourteen is a bounded engagement you can commission on its own, with defined scope, defined outputs, and senior delivery. Reviews and diagnostics establish your position before any programme commitment. Design engagements set out the capability you need, and phased engagements lead its delivery alongside your teams.

Establish your position

Design and deliver the change

Cyber Risk and Security Assurance

Explore the practice area

Establish your position

Cyber Risk Decision Review

An independent risk opinion on one system, cloud service, or architecture, with conditions for approval and the residual risk stated plainly.

View engagement

Design and deliver the change

Cyber Risk Framework Design

A cyber risk management framework aligned with your enterprise risk framework, so cyber risk is assessed and reported on the same basis as other material risks.

View engagement

Cybersecurity Governance and Board Advisory

Explore the practice area

Establish your position

Board Cyber Governance Review

How your board oversees cyber risk today, and what would need to change to satisfy directors and regulators, closing with a facilitated board workshop.

View engagement

Cyber Resilience Executive Exercise

Executives rehearse the decisions a real incident would force, against a scenario built on your critical services, ending in an improvement plan.

View engagement

Design and deliver the change

Cyber Governance Framework Design

A cyber governance framework that sets decision rights, accountability, and board oversight, aligned with management body obligations.

View engagement

Regulatory Cyber Resilience

Explore the practice area

Establish your position

NIS2 Readiness Diagnostic

Five days, six defined outputs. Scope, gap, and governance readiness before any programme investment, with a readiness brief for the management body.

View engagement

Critical Supplier Cyber Risk Review

Which supplier relationships carry material cyber risk, where concentration sits, and what the contracts and due diligence need to change.

View engagement

Design and deliver the change

NIS2 Programme Design and Delivery

A funded NIS2 programme designed from your diagnostic findings and delivered in agreed phases, with evidence for supervisory review.

View engagement

Cloud and Digital Security Governance

Explore the practice area

Establish your position

Cloud Security Governance Review

Whether cloud security governance operates in practice, covering ownership, policies, and exceptions, and what needs fixing first.

View engagement

Design and deliver the change

Cloud Landing Zone Design

A governed cloud foundation designed around your organisation, with a staged plan to bring your estate onto it without disrupting live services.

View engagement

Zero Trust Strategy and Transformation

Explore the practice area

Establish your position

Zero Trust Discovery and Roadmap

Maturity, priority use cases grounded in business risk, and a phased roadmap with investment priorities, before any technology commitment.

View engagement

Design and deliver the change

Zero Trust Transformation

A phased transformation led by independent architects and programme governors, starting with a pilot on a high-priority service, each phase agreed in advance.

View engagement

AI Governance and Transformation

Explore the practice area

Establish your position

AI Readiness and Governance Review

Where AI use already exists across your organisation, including use nobody formally approved, what it is missing, and what to build first.

View engagement

Design and deliver the change

AI Factory Design

An AI factory designed around your priorities, with a phased transformation plan, named owners, and investment decision points.

View engagement