Cyber security and IT governance you can evidence
Cyber risk is now a board and audit issue, not just an IT one. We review how your systems, people and suppliers are protected, test them the way an attacker would, and give you a clear, prioritised plan to put right what matters.
Five questions for your board
A quick test of where you stand today.
- 1Do you know where your sensitive and personal data is held?
- 2Is multi-factor authentication switched on for email and remote access?
- 3Are backups tested, and kept separate from your main network?
- 4Do you have a written incident response plan that people have practised?
- 5Have you checked the security of the suppliers who handle your data?
If the answer to any of these is “no” or “not sure”, a review is worth having.
Our cyber security services
Has security become a worry in your business, but you are not sure which kind of help you need? We start by understanding your risks, then match the service to the problem.
Penetration testing
Ethical hackers run real-world, human-led tests on your networks, websites and applications. You get the critical vulnerabilities, what each could mean for the business, and clear steps to fix them.
Security risk and consulting
Tailored consulting and maturity assessments that show where you are exposed and where to invest first, so your security spend strengthens defences over the long term.
PCI DSS certification
If you store, process or transmit card payment data, we define your PCI DSS obligations, assess the gaps and help you put secure, validated controls in place to achieve certification.
Incident response
When something goes wrong, our response team identifies, contains and analyses the incident, carries out a forensic investigation and guides you back to normal operations with stronger resilience.
IT governance review: what we look at
An IT governance review gives directors, trustees and auditors independent assurance that technology risks are being managed. We look at controls as they actually operate, not just as they are written down.
- Governance and policiesWho owns IT risk, how it is reported to the board, and whether policies are current and followed.
- Access controlUser accounts, admin rights, leavers, passwords and multi-factor authentication.
- Data protectionWhere personal data sits, who can reach it, and how you meet UK GDPR duties.
- Backup and recoveryWhether backups work, how quickly you could recover, and how often this is tested.
- Systems and changePatching, updates and how changes to finance and key systems are approved.
- Suppliers and the cloudDue diligence on IT providers, cloud services and anyone else who handles your data.
How a review works
Trust, integrity and innovation guide how we work. We listen first, so we understand the challenges you face before recommending anything.
Scope
We agree the systems, risks and regulatory requirements in scope, and who needs the results.
Assess
Interviews, configuration reviews and testing show how your controls work in practice.
Report
Findings are ranked by risk, with a plain-English summary for the board and detail for your IT team.
Fix and retest
We help you act on the plan, then retest so you can show the issues have been resolved.
Cyber security across sectors
Every sector faces different threats and regulators. Our work is tailored to the data you hold and the rules you answer to.
Financial services
Protect sensitive financial data, meet regulatory requirements and defend against sophisticated threats facing banks, insurers and financial firms.
Technology
Safeguard intellectual property, secure development environments and keep services running for fast-moving tech and software businesses.
Retail
Defend customer data, secure payment systems and prevent fraud across online and in-store operations.
Education
Protect student records, research and campus networks for schools, colleges and universities.
Healthcare
Protect patient records, medical research and clinical networks for practices, clinics and healthcare providers.
Agriculture
Protect crop data, research and farm systems for farms, agribusinesses and supply chain providers.
Find out where you stand
Talk to us about a review, a penetration test or help after an incident. We will give you a clear view of your risks and what to do first. Call us on 0333 880 8400.
Related services and insights
This page gives general information only. The scope of any review or test is agreed in writing before work starts.
