Information Risk Management
At the heart of effective Cyber Security is Information Risk Management. Get it right and your organisation will have a basis for defining, articulating, measuring and controlling risks. Get it wrong and it can be a wasted effort or lead to too little or potentially worse, too much security. Our consultants are qualified and experienced to support you in managing security risks through systematic processes that bridge business and technical domains.
Information Audit and Compliance Assessments
We are experts at evaluating the technical and procedural controls documented and deployed in organisations, against widely recognised cyber security standards including ISO/IEC27001, SOC2 Principles, NIST SP800 Series and NCSC Guidance. Our team will support you in achieving compliance and certification with pragmatic advice and guidance on the right controls to remediate risks and control gaps. Our team includes former Qualified Security Assessors (QSA) able to advise on the Payment Card Industry Data Security Standard PCI DSS. We also offer full assessment and certification services for SOC2 and Cyber Essentials/ Cyber Essentials Plus.
Information Security Management
We help build Information Security Management Systems that are compliant with ISO/IEC27001 and can be certified by the chosen certification body. We use principles-based guidance such as the NCSC Cloud Security Principles to assess systems and services, tailored to your context.
Data Privacy
Our expert consultants help you to achieve compliance with GDPR, the Data Protection legislation, and other local and national privacy legislation.
Cyber Readiness Assessments
Whatever your compliance objectives are, measuring your organisations policies, procedures and controls against the requirements of your chosen standard is critical. Our Cyber Readiness Assessment service provides an objective assessment alongside a report, enabling clear understanding of any compliance gaps, their criticality and how they can be remediated proportionately and effectively. Our consultants are highly experienced and CCP-certified under the NCSC Certified Cyber Professional Assured Service.