Consulting practice
Security strategy, architecture and ISMS work across the full lifecycle, based on ISO 27000 and NIST.
Information security protects the confidentiality, integrity and availability of the information your organisation runs on. It needs to cover people, process and technology, and it needs to keep pace with how attackers operate.
Our approach is based on frameworks such as the ISO/IEC 27000 series, the NIST Cybersecurity Framework and SABSA. Our security consulting covers the entire information security lifecycle: we assess, analyse, design, develop, implement and manage information security services and solutions.
Work ranges from security strategy and policy to security architecture, information security management systems (ISMS), security operations and awareness. We have defined security operations centre solutions, information and cyber security architectures for large utilities, and managed transitions of outsourced security services between providers.
For a fast start, the ISMS FastTrack and security architecture FastTrack deliver a working management system or architecture in a fixed scope. For ongoing protection, our CloudTrack services provide security monitoring, penetration testing and security behaviour programmes as a service.
Cyber
Security information and event management (SIEM) that correlates events and raises real incidents.
Cyber
Controlled attacks on networks, systems and applications to show what an intruder could reach.
Cyber
Phishing simulations and behavioural nudges that measurably reduce people-related security risk.
Yes. The ISMS FastTrack sets up an information security management system aligned to ISO/IEC 27001, and we can support you through operation and improvement.
Yes. We have defined SOC solutions and managed their implementation. If you prefer not to build one, SIEM as a service (SIEMaaS) provides monitoring without the in-house team.
It is the design of security controls across the organisation, derived from business needs and risk. We use SABSA so every control traces back to a business reason.
A fixed-scope assessment shows where you stand and what to fix first. Tell us what you need and we will propose the right one.