Consultancy
We help organisations solve problems with technology: finding the right solution to a challenge, shaping it and seeing it through, with security, privacy and AI governance built in from the start. We build technology ourselves, so the advice comes from people who design and operate systems, not only assess them. It is senior-led, and built on the standards your auditors and regulators recognise.
The work we do
- Solving problems with technology
Working through a challenge with you to find the right answer: defining the problem, weighing the options, deciding whether to buy, adapt or build, and testing the idea before you commit to it.
- Building the solution
Shaping what comes next: architecture, data and AI, prototypes and proofs of concept, and a delivery plan your team can follow, through to something they can run.
- Secure by design
Architecture review and design for systems, platforms and integrations, with security, data protection and AI risk considered together from the start, including impact assessments for higher-risk processing and AI systems.
- Management systems and certification
Management systems aligned with ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001, and programmes aligned with UK and EU data protection law and the EU AI Act, built to be run after certification, not only to achieve it.
- Risk and assurance
Risk assessment at the level of the organisation, system or third party; supplier and supply chain assurance; AI inventories and risk classification; international transfer assessments; and privacy due diligence for transactions.
- Leadership when you need it
Outsourced and fractional leadership for security, data protection and AI governance (vCISO, vDPO and vAI Governance Officer), for organisations not yet ready to appoint, or needing senior support through a transition.
- Boards and regulators
Advice to boards and senior leadership on posture, investment and regulatory change, and support with regulators: enquiries, consultations and personal data breach notification.
- Incidents and continuity
Incident response and business continuity arrangements, tabletop exercises with leadership, and post-incident reviews.
How we work
A good solution and good security, privacy and AI governance are decided in the same design, so we work on them together rather than as separate disciplines.
We look at architecture, regulation and operations together, with a practical view of what an organisation can actually run. The programmes we help build are proportionate to the risks faced, fit the wider risk and compliance arrangements, and are designed for the team that will operate them.
Because we build technology as well as advise on it, we know what a control costs to run day to day, and we design for that from the start.