Cyber Risk Assessment
Identify Your Maturity
We identify threat and risk in order to design and build effective security capability for your business.
We help you understand how effective your IT and security capability is at creating value and reducing risk.
Our Capabilities built on Risk and Organisation Situation Awareness (CabROSA) methodology is drawn from business architecture and underpinned with industry accepted best practice frameworks (for example, ITIL, NIST, ISO27001 and IEC62443), which enables us to create an excellent level of visibility across your organisation.
Strategy & Capability Assessment
Effective IT and OT security results from a strategy that balances people, process, information and technology. Our unique business architecture-based approach enables us to build IT and OT security strategy, risk, governance and comprehensive security programs.
Risk Assessment
We assess IT, IT security and OT security risk. We draw on ISO27001, NIST CAF, NIS CAF and IEC62443. Our risk assessors include Lead Security & Information Risk Assessor’s (SIRA) a certification accredited via the Chartered Institute of Information Security (CIISec)and the UK’s National Cyber Security Centre (NCSC).
Threat & Impact Assessment
We review organisation profile to develop a high-level threat assessment. Combined with our risk assessment data and the MITRE ATT&ACK framework we conduct a bow tie exercise and cost impact assessment against a critical organisation activity.
Strategy & Capability Assessment
Effective IT and OT security results from a strategy that balances people, process, information and technology. Our unique business architecture-based approach enables us to build IT and OT security strategy, risk, governance and comprehensive security programs.
Risk Assessment
We assess IT, IT security and OT security risk. We draw on ISO27001, NIST CAF, NIS CAF and IEC62443. Our risk assessors include Lead Security & Information Risk Assessor’s (SIRA) a certification accredited via the Chartered Institute of Information Security (CIISec)and the UK’s National Cyber Security Centre (NCSC).
Threat & Impact Assessment
We review organisation profile to develop a high-level threat assessment. Combined with our risk assessment data and the MITRE ATT&ACK framework we conduct a bow tie exercise and cost impact assessment against a critical organisation activity.