Solution area · Cybersecurity

Cyber risk, managed across the full lifecycle.

Consulting and engineering services aligned with international frameworks. Ten service areas in four capability domains take you from risk assessment and compliance through engineering, incident response and resilience.

Book an assessmentService catalog
01Capability domains

Four domains, one view of cyber risk.

/ 01

Risk & compliance

Maturity assessment, CISO-as-a-service and privacy.

/ 02

Threat management & engineering

Penetration testing, security architecture, Zero Trust and IAM.

/ 03

Resilience & response

Cyber and operational resilience, incident response and forensics.

/ 04

Technology risk

IT risk and controls, IT audit, due diligence and software asset management.

02How we work

Identify, protect, detect, respond, recover.

  1. IDENTIFY

    Risk & maturity

    Baseline and roadmap.

  2. PROTECT

    Engineering & IAM

    Architecture and access.

  3. DETECT

    Threat management

    Testing and monitoring.

  4. RESPOND

    IR & forensics

    Contain and investigate.

  5. RECOVER

    Resilience

    Continuity and recovery.

03Benefits by sector

What it does for your sector.

Security services for networks, IT and OT.

  • Network and signalling security assessed against international frameworks
  • Resilience for critical national infrastructure
Use cases
Penetration testing incl. OT/IoTSOC/SIEM maturityZero Trust
More for telecom operators →
04Service catalog

Ten service areas and their reference frameworks.

Service areaKey sub-servicesReference frameworks
Cyber risk managementRisk & maturity assessment, remediation, CISO-as-a-service, third-party securityNIST CSF, ISO 2700x, CIS Controls
Data protection & privacyPrivacy compliance program, PIA, data protection technology designGDPR, ISO 27701, NIST 800-53
Cyber threat managementPen testing & vulnerability management, source code, OT/IoT, cloud testingNIST, OWASP, OSSTMM, SANS
Cyber engineeringIT and cloud security architecture, remote working, OT/ICS, SOC/SIEM maturityISA/IEC 62443, SP 800-207, CSA CCM
Digital identity & accessIAM governance and architecture, implementation, segregation of dutiesZero Trust, GDPR
Cyber resilienceResilience & continuity, DR analysis, incident preparation, crisis simulationISO 22301, NFPA 1600, BCI, DRII
Incident response & forensicsCybercrime management, malware reverse engineering, incident intelligenceNIST IR, CREST, ISO/IEC 27037/27043
Technology risk & controlsRisk strategy & governance, assessments, SOX, ITGC / IT audit, IT TPRMCOBIT, COSO, GTAG, ISO 20000/ITIL
Operational resilienceBCM, technology continuity, IT DR, testing, crisis management, trainingISO 22301, BCI, DRII
IT due diligence & SAMBuy-side / vendor IT DD, post-merger IT roadmap, SAM & licensingISO 27001/22301, COBIT, ISO 19770
05 · Business benefits

Lower breach risk and regulatory exposure, risk explained in business terms, and faster, auditable compliance.

Know where you stand. Then close the gaps.

Book an assessment