If you're not sure where you stand, start here. A senior consultant looks at how things are set up and what your customers or insurer expect, and tells you what to fix first. Nothing to install, very little to prepare.
What we can help with
Practical work that ends with a clear list of what to do, not a stack of documents nobody reads.
Security review
How your systems are set up, who can access what, how backups work and where the obvious risks are. You get a short, prioritised list of what to fix and why.
Compliance readiness
Getting ready for Cyber Essentials, a supplier questionnaire, a public sector tender or an insurance renewal. We find the gaps and help you close them.
Policies
Written around how you actually work, short enough that people read them, specific enough to show an auditor.
Incident readiness
A plan for the day something goes wrong: who does what, who to call, and a tabletop exercise so your team has practised it once before it's real.
When people usually call us
Consultancy suits organisations of about 10 to 250 people with an IT provider or an in-house IT person, but nobody whose job is security.
A contract depends on it
A government department or a large customer wants Cyber Essentials or a completed security questionnaire before signing.
The insurer is asking
A renewal asks about MFA, backups and incident plans, and you want honest answers.
Something went wrong
You want to know how it happened, and how to stop it happening again.
Is something happening right now? If you think you're dealing with an active breach, tell us straight away instead of booking a review.
What happens when you get in touch
Four steps, and after that it's up to you: some move to a Blue retainer or book a penetration test, others work through the list themselves.
A call
What's prompting the question, any deadlines, what you already have, and who looks after your IT.
A proposal
A short document with the scope, the number of days, what you'll get at the end and the price.
The review
Conversations with the right people, a look at your documentation and settings, and light technical checks if you authorise them.
Findings
A report with clear priorities, and a session to go through it with you and your IT provider.
Book a security review
Tell us a little about your organisation and what's prompted the question.