Clients we've worked with
Security is a condition of doing business
Customers and partners now assess your security before they sign. Digital health products, cloud platforms and medical device software raise the bar further, under GDPR, the nDSG, EU-MDR, HIPAA and FDA expectations.
Skilled security people are scarce and CISO tenures are short. We give you the senior expertise to build a security programme that holds up, from strategy to day-to-day risk management.
What we do
From strategy to day-to-day risk
Strategy, governance & policy
A security strategy and policy framework that fits your business goals and regulatory obligations.
Risk & maturity assessments
Across your organisation and your AWS, Google Cloud or Azure platforms, with a prioritised roadmap.
Third-party & supply-chain security
Vendor assessments and contractual controls for the suppliers who handle your data.
Secure product development
Security built into the development lifecycle of digital health apps and software medical devices.
Customer security reviews
Answering customer questionnaires and audits so security supports sales instead of delaying them.
CISO support & risk reporting
Hands-on support for your CISO organisation, risk management and board reporting, and business continuity.
Looking to certify?
We take organisations through ISO 27001 and its cloud and privacy extensions, from gap analysis to audit.
What it gives you
- Fewer and less costly security incidents
- A security programme aligned with your business goals and with GDPR, EU-MDR, HIPAA and FDA requirements
- Faster, better-managed response when incidents happen
- Confidence for customers, investors and regulators
Facing a security review or a new risk?
Book a 30-minute call and we'll give you a first view of scope and timeline.