SOC 2
Type I & Type IIScoping the Trust Services Criteria, mapping controls to your stack, gap assessment, evidence collection, and walkthrough rehearsals ahead of your auditor engagement.
Cyber Support
Compliance readiness & cyber awareness training
Hands-on support for organisations — built on 25 years of VP-level programme experience. Get genuinely ready for the audits that matter and equip your people with security instincts that hold up under pressure.
Compliance & audit readiness
Audits you can actually pass
Practical, evidence-led readiness work tuned to your real environment rather than a generic checklist. Scoping, gap analysis, control design, evidence preparation, and stand-in support during the external audit.
Cyber Essentials
Basic & PlusNCSC-aligned readiness for both the self-assessment and the audited Plus tier — boundary firewalls, secure configuration, access control, malware protection, and patch management.
ISO/IEC 27001
ISMS readinessBuilding or tightening your Information Security Management System: risk treatment, Statement of Applicability, Annex A controls, internal audit, and management review.
Cyber awareness training
Training people, not slide decks
Group sessions tailored to the people in the room. Whether you need wider workforce awareness or focused security skills for engineers, the content is shaped to your threat model and tech stack.
Security awareness
Practical sessions on phishing, social engineering, password hygiene, MFA, safe remote working, and incident reporting — grounded in the threats people actually face day-to-day.
Secure coding & threat modelling
OWASP Top 10 walk-throughs, secure SDLC, input validation, secrets handling, authentication & session design, and threat-modelling workshops applied to your own services.
Delivery
Online, on-site, or both
Engagements scale from a single team to a company-wide programme.
Online
Live remote sessions over your preferred platform — best for distributed teams or quick policy refreshers.
On-site
In-person workshops at your office or training room — best for cohort onboarding, leadership briefings, and engineering deep-dives.
Blended programmes
A short on-site kick-off followed by online reinforcement sessions — works well for multi-month readiness pushes.
Let's talk about your programme
Audit on the horizon, or a team that needs sharper security instincts? Tell me where you are and I'll come back within 24 hours with a path forward.