Services
Professional Cyber Security & IT Management Services
I offer a comprehensive range of cyber security and IT management services tailored to the needs of small, medium, and large organisations. All services are delivered with the highest standards of professionalism, confidentiality, and integrity, backed by over 22 years of real-world experience.
Virtual CISO (vCISO)
Ongoing, part-time Chief Information Security Officer services providing strategic security leadership, board-level reporting, and security programme management without the cost of a full-time executive.
- Security strategy development
- Board & executive reporting
- Security programme oversight
- Policy & governance framework
- Regulatory compliance management
Cyber Security Strategy & Governance
Development of comprehensive cyber security strategies aligned with your business objectives, risk appetite, and regulatory requirements. Leveraging MBA-level strategic thinking with deep technical knowledge.
- Security roadmap development
- Governance framework design
- Risk appetite definition
- Security KPI & metrics
- Maturity assessments
Risk Assessment & Management
Thorough assessment of your organisation's cyber security risks, with practical recommendations for risk mitigation and management.
- Threat & vulnerability assessment
- Risk register development
- Risk treatment planning
- Third-party risk assessment
- Supply chain risk management
Compliance & Audit Readiness
Guidance and support for achieving and maintaining compliance with industry standards and regulatory requirements, including ASD Essential Eight, ISO 27001, and GDPR.
- Essential Eight assessment & implementation
- ISO 27001 implementation
- NIST framework alignment
- GDPR compliance
- Audit preparation & support
Incident Response Planning
Development and testing of incident response plans to ensure your organisation can effectively respond to and recover from security incidents.
- Incident response plan development
- Tabletop exercises
- Crisis communication planning
- Post-incident reviews
- Business continuity integration
IT Management & Infrastructure
Strategic IT management services drawing on years of enterprise infrastructure experience, including assessment, optimisation, and digital transformation guidance.
- IT strategy & planning
- Infrastructure assessment
- Cloud migration strategy
- Vendor management
- IT budget optimisation
Security Awareness & Training
Customised security awareness programmes designed to build a security-conscious culture across your organisation.
- Awareness programme design
- Phishing simulation campaigns
- Executive security briefings
- Security culture assessment
- Tailored training workshops
SOC & Managed Security Advisory
Advisory services on security operations centre design, managed security service selection, and security monitoring strategy, drawing on direct experience building and leading SOC operations.
- SOC design & maturity assessment
- SIEM & monitoring strategy
- Managed security service evaluation
- Threat intelligence integration
- Security operations optimisation
Engagement Models
I offer flexible engagement models to suit your organisation's needs: