Security leadership that speaks to the board.
For executive committees, boards, risk departments and CIOs of regulated organizations. Govern, assess, secure; prepare, decide, recover.
vCISO (virtual CISO)
A senior cybersecurity consultant who acts as your part-time head of security: reports to the risk committee and the board, and leads teams and providers.
Flash diagnostic & cyber audit
A status review in ten working days, a prioritized action plan, a report the regulator can read.
GRC & multi-regulator compliance
ISO 27001, ISO 42001, ISO 22301, PCI DSS, SWIFT CSP, CBUAE, BCEAO, COBAC and CIMA requirements, with harmonised governance and reusable controls.
Third-party risk (TPRM)
Mapping of critical suppliers, contract clause library, review of remote access and AI subcontractors.
Cyber resilience & crisis exercises
Simulations with executives, continuity plan, formal lessons learned. See The Decision Room.
Security by Design
Security built in from the design of projects, including AI projects and agents.
Four steps, always in this order.
- 1DecideShort diagnostic, priorities settled with leadership.
- 2GovernPolicies written to be executed, not filed away.
- 3ConnectHarmonised governance, reusable controls, evidence tailored to each regulator.
- 4ProveEvidence the auditor can read without us.