01
Vendor assurance (TPRM)
Supply chain and third-party risk. We review your suppliers, check the evidence they give you and show you which ones need attention.
- Supplier risk reviews
- Evidence checks against what vendors claim
- Recommendations to take back to your suppliers
02
Cyber risk review
Not every risk deserves the same attention. We find the ones that matter most and show you where your controls fall short.
- Risks written up with cause, impact and fix
- Control gaps and recommended treatments
- A ranked list of what to do first
03
Security posture
A clear picture of how well protected you are today, and a plan to improve it.
- A baseline across key controls and daily practices
- Quick wins and longer-term improvements
- A roadmap your team can follow
04
Phishing and security awareness
Most attacks start with a person, not a piece of software. We help your people spot phishing and social engineering before it costs you.
- Phishing and social engineering campaigns
- Security awareness training for staff, executives and delivery teams
- Practical guidance that changes everyday habits
Not sure where to start?
Tell us what's worrying you and we'll suggest a sensible first step.