More Services

Tailored security for professional firms. This is a selection of our services and we will work with you on a bespoke package that meets your specific requirements.

Governance, Policies & Advisory

Our Security Governance & Policy Development service incorporates the design and implementation of bespoke formalised policies and associated procedures based on your actual business practices.

Our Virtual CISO service ensures you have executive level ongoing support, strategic security leadership, and roadmap development and implementation.

Risk Governance & Management

We design, implement and conduct: Risk assessments, risk registers, treatment plans, and ongoing risk governance aligned to ISO 27001 and recognised frameworks.

With regards to suppliers and 3rd parties we design, implement, and operate: Supplier security assessments, customer security questionnaires, third-party risk management frameworks, and ongoing vendor risk monitoring.

We provide ISO 27001, SOx, SOC 2, Lexcel and DSPT readiness assessments, ISMS design and implementation, certification preparation, internal audits, and ongoing maintenance.

Cyber Essentials readiness gap analysis, remediation guidance, audit readiness, and ongoing compliance support.

Independent security audits, control effectiveness reviews, internal assurance, and support for regulator, insurer, and customer audits.

We also offer support and readiness with regards to European Regulations (NIS2 DORA, GDPR) and preparation for the UK's Cyber Security and Resilliency Bill.

Information Security & Compliance Services.

Training, Testing, & Resilience

Technical Security Advisory

Investigation & Specialist Support

Our Security Architecture and Design service provides independant advice on security architecture, controls, and secure configurations. Where required we will work with your current IT partners and will act as an advocate for any of our clients, ensuring you get the most out of your sevice while identifying opportunities for cost efficiencies.

The Encryption and Data Protection service includes the development of an Encryption Strategy, data protection guidance, the secure handling and transmission of sensitive or confidential information, and retention periods. We can aslo help develop your Data Protection Programme and Policies, act as your Data Protection Officer, and securely store any secrets.

Blockchain Investigation and Support. This service produces, to the criminal standard, evidence of funds or assets being moved on, off or around the blockchains. This also includes associated witness statement and relevant records under CPIA 1996

Crypto Custodian Service. Where you or your clients need to secure digital assets in an easy to access way. We can hold the assets for you or help design your service.

Digital Investigation and forensics. Evidence will be captured to the criminal standard, including associated witness statements and records.

Internal investigations. We support internal, HR, Fraud, compliance and criminal investigations using authorised covert and overt means as required to the criminal standard.

Audit Support. We act as the interface between your business and your auditors translating technical evidential requests into practical actions, simplifying the process and ensuring timely completion, reducing over all costs and overruns.

We offer one time or regular training packages with regards to Cyber Security, Information Security, and Data Privacy as well as a programme of phishing simulations to give you the assurance you require to know your staff are operating securely.

Incident Response training is a bespoke programme for business leaders that teaches how to plan for, deal with, and recover from a range of technical and non-technical incidents. It includes training on relevant timeframes as well as successful Disaster Recovery and Business Continuity Processes meeting your resiliency requirements.

We also offer Incident, Disaster Recovery, and Business Continuity simulations and table top exercises in order to meet compliance objectives.

Incident & Emergency Response

If you've suffered an incident, wether a reportable data breach or ransomware has locked down your environment, we can help and advise on appropriate courses of action. We also offer a management service where we will manage your incidents for you and ensure regulatory timeframes are met.