01 / Identify
Establish what you have, what it's worth, and where it's exposed.
- Virtual CISO
- Vulnerability Assessment
- Penetration Testing
- Governance, Risk & Compliance
- Security Awareness Training
Cybersecurity an auditor can actually follow.
A layered program built on the NIST framework, not a pile of tools bought one incident at a time. We assess what you have, show you which stage is thinnest, and price the fix across the whole supplier market.
25Discrete security services we source and manage
24/7SOC-as-a-service monitoring and escalation
4Framework stages, none left implicit
2–3 wksTypical assessment, fixed scope
The practice
How the practice is structured
Four moves, in order. Most programs we inherit are strong at one stage and thin at the others. The assessment tells you which.
02 / Protect
Reduce the attack surface and control who reaches what.
- Zero-Trust Framework
- Identity & Access Management
- Data Loss Prevention
- Managed Firewall
- Email Security
- Patch Management
03 / Detect
Instrument the environment so an intrusion surfaces in minutes.
- SOC as a Service
- Log Management (SIEM)
- Intrusion Detection
- Intrusion Prevention
- Machine Learning Detection
04 / Respond
A rehearsed path from alert to containment to restored service.
- Incident Response
- Containment
- Eradication & Restore
The catalogue
25 services in Cybersecurity
Everything on the solution map under this domain. If a requirement isn't listed, it's usually still sourceable, so ask.
Identify 5
- Virtual CISO
- Vulnerability Assessment
- Penetration Testing
- Governance, Risk & Compliance
- Security Awareness Training
Protect 8
- Managed Firewall
- Web Application Security
- Email Security
- Managed Cloud Firewall
- Data Loss Prevention
- Zero-Trust Framework
- Patch Management
- Identity & Access Management
Detect 5
- Log Management (SIEM)
- Machine Learning Detection
- Intrusion Detection
- Intrusion Prevention
- SOC as a Service
Respond 3
- Incident Response
- Containment
- Eradication & Restore
AI-enabled AI
- Attack Identification
- Rapid Response
- Social Engineering Detection
- Biometric Authentication Systems
What changes
What you actually get out of it
Not a platform choice. A set of decisions with the reasoning attached, and someone accountable for them at renewal.
- A written picture of which framework stage your program is actually funding.
- Tooling priced across multiple providers instead of one vendor's bundle.
- Compliance artefacts produced as a by-product of the program, not a year-end scramble.
- An escalation path that names people, not queues.
Security assessment2–3 weeks
01Asset & data inventoryIdentify
02External & internal vulnerability scanIdentify
03Control gap analysis vs. frameworkProtect
04Logging & detection coverage reviewDetect
05Incident response readiness testRespond
06Prioritised remediation roadmapDeliverable
Fixed scopeRequest scoping
Adjacent practices
Where Cybersecurity usually connects
A finding in one practice commonly implicates another. These are the three most often opened alongside this work.
36 services
CLDCloud & Managed Services
Where the workload should live, how it gets there, and who runs it at 2am, across public, private, hybrid and colocation.
Explore22 services
NETAdvanced Networking
SASE, SD-WAN and the circuits underneath, designed for the sites you have, priced against the whole carrier market.
Explore15 services
ADVAdvisory & Lifecycle
The work around the technology: strategy, sourcing, the people to run it, and responsible disposal at end of life.
ExploreNext step
This practice begins with an assessment.
Scope, duration and deliverables are agreed in writing before it starts. Ask for the scope document and we will send it.