Practical resources and checklists you can use with your team, finance and the board.
How AI-enabled phishing and deepfake voice and video fraud change the threat, and the verification, identity and process controls that still protect you.
Cyber Essentials or ISO 27001? How the two differ in scope, approach and assurance, and how to decide which your organisation needs, or whether to hold both.
Preparing a cyber insurance application? The security controls you are likely to be asked about, the evidence to gather and how to answer accurately.
How to report cyber risk to your board in business terms, using the UK Cyber Governance Code of Practice and the NCSC Cyber Security Toolkit for Boards.
How payment diversion and business email compromise work, and the finance, email and identity controls that stop fraudulent payments before money leaves.
A calm, practical plan for the first 24 hours of a ransomware attack: who to call, how to contain it, what to preserve and which UK bodies to report to.
A practical checklist for managing supplier cyber risk: tier your suppliers, ask the right questions, set contract terms and keep monitoring them over time.
A plain-English guide to the cover commonly found in cyber insurance policies, the exclusions to check and the questions to ask an authorised broker.
Free cyber risk review
A free, no-obligation review for organisations of 50 to 5,000 people, with plain-English findings for your security team, finance and the board.