Security and compliance advisory
A clear-eyed look at where you are exposed and what the regulator expects, with findings ranked by what would actually hurt.
When this is the right assessment
- A customer security questionnaire arrived and nobody can answer it with confidence.
- Controls exist on paper but nobody has checked whether they are operating.
- Security work is an unranked list of findings from a scan nobody has read.
What it covers
- Control and posture review
- Compliance gap analysis
- A ranked remediation plan
What you will know afterwards
A view of where you are actually exposed, ranked by what an incident would cost.
A gap analysis against the obligations that apply to you.
A remediation plan ordered by impact rather than by ease.
Questions we get asked
- Is this a penetration test?
- No. This is advisory work: reviewing controls, posture and gaps. Testing is a separate specialism, and we will say when you need one.
- Will you certify us?
- No. We hold no certifications to grant and do not act as an auditor. The work prepares you for whoever does.
- Who sees the findings?
- You do. Findings are written for your team, and are not shared or reused elsewhere.
Other advisory work
- IT strategy and digital transformation
- Cloud advisory and migration
- Solution and enterprise architecture
- Data strategy and governance
Advisory work sits under our Information Technology Consultants licence. Building what an assessment recommends sits under Services, and keeping it healthy afterwards under Application Support.
Start with an assessment.
A 30-minute call first, at no cost, to work out whether an assessment is the right starting point at all.