Service
Consulting
Long-term security strategy, framework alignment, and incident response readiness built from attacker behavior.
Overview
Prevention and response, before they are needed
Controls are most effective when they are designed before an incident, not selected during one. Incident response plans are most useful when they are rehearsed before they are invoked.
We help organizations build security programs and response capabilities that are grounded in attacker behavior, not vendor marketing or compliance minimums.
Incident Readiness
Ready before it happens
The organizations that recover well from incidents are the ones that practiced recovery before they needed it.
Incident Response Plan Review
Procedures and playbooks
Tabletop and Crisis Exercises
Tested before you need it
Ransomware Readiness Assessment
Recovery and resilience
Compromise Assessment
After an incident or as a proactive measure
Strategy and Governance
A program built to hold
Security programs that outlast the engagement they were designed for are built around realistic threat models, not frameworks as checklists.
Security Strategy and Roadmap
What to do, and in what order
NIS2 Readiness and Gap Analysis
EU directive applicability
Framework Alignment
ISO/IEC 27001, NIST CSF, CIS Controls
MITRE ATT&CK Alignment
Coverage against observed attacker behavior
Process
How an engagement runs
- 1
Understanding the environment
A call to understand your systems, your team, your regulatory context, and what is driving the engagement. Strategy work requires context that a checklist cannot capture.
- 2
Assessment
Interviews, document review, and where relevant, technical review. We build a picture of your current posture from the ground up rather than against an assumed baseline.
- 3
Gap analysis and prioritization
Findings ranked by the risk they represent, not by their position in a framework. The output is a prioritized list, not a scored audit.
- 4
Reporting and recommendations
An executive summary for leadership and a detailed roadmap for the team responsible for implementation, with a realistic sequencing of what to address first.
- 5
Ongoing support
Available for questions, implementation review, and follow-up assessments as controls are put in place.
Questions
Common questions
We are not a large organization. Is this relevant to us?
Framework alignment and strategy work is often more useful for smaller organizations, where the decisions that define your posture are made by a small team and a clear priority order has an immediate effect. The work scales to the organization.
How does consulting relate to the technical assessments you offer?
The two are most useful together. A technical assessment tells you what is wrong; a consulting engagement helps you decide what to fix first and how to build the processes that stop the same issues recurring.
Do you support NIS2 compliance?
Yes. We review your current posture against the NIS2 measures that apply to your organization and produce a prioritized gap analysis. We do not file documentation on your behalf, but we produce everything you need to do it.
What does a ransomware readiness assessment involve?
A review of your backup architecture, restore procedures, offline or immutable copies, and the controls protecting the backup infrastructure itself. We also review the lateral movement paths that would let an attacker reach your backups, since backup deletion is typically the first step before encryption begins.
Contact
Tell us what you need
Describe the systems and what you need looked at. We come back with a scope and a window before you commit to anything.
- [email protected]