Cyber strategy & programme leadership
National and enterprise cyber strategies, roadmaps and multi-year security programmes, from business case to delivery.
outcomeA strategy leadership can fund, and a programme that lands.
Services
Senior judgement across the cyber domain.
Strategy, governance and resilience from someone who has built national cyber defence.
Incident response & CIRT/SOC design
Response capability, playbooks, early warning and tabletop exercises, from someone who helped build a national CIRT.
outcomeA team that knows what to do in the first hour.
GRC, audit & privacy
ISO 27001 and 27701 readiness and internal audits, NIST CSF and ITSG-33 alignment, policy sets.
outcomeEvidence-ready controls, and no surprises at certification.
IT, third-party & infrastructure risk
Enterprise, vendor and critical-infrastructure risk assessments in language leadership can act on.
outcomeA risk register and treatment plan tied to business impact.
Offensive security & VAPT
Scoping and managing penetration tests and vulnerability programmes, through to remediation.
outcomeReal exposure found and fixed, not just reported.
AI governance
ISO 42001 AI management systems, AI risk assessment and responsible-AI policy, aligned with NIST AI RMF and the EU AI Act.
outcomeAI use you can explain to regulators and customers.
Financial crime & fraud controls
AML/KYC and fraud-prevention control reviews against FINTRAC expectations.
outcomeControl gaps mapped to regulatory requirements.
Training & capacity building
Security training for executives, technical teams and law enforcement; curriculum and lab design.
outcomePeople who can run what gets built.
Preparing for ISO 27001?
A free two-minute readiness check shows your biggest gaps against what certification auditors look at first.