Resources

Useful, current, and free of sales theatre.

Our knowledge hub, the case studies behind our work, and a running tracker of the regulatory deadlines that actually matter. Want a personalised read? The 2-minute compliance readiness check is the fastest place to start.

Take the readiness check See all tools
A laptop, notebook and coffee on a desk

Knowledge hub

Long-form guidance you can act on.

All insights
Managed security

The best MDR providers in the UK: how to build a shortlist that fits

There is no single best MDR provider, only the best fit for your estate, sector and regulator. The four types of MDR provider in the UK market, who each suits, the seven tests that separate them, and how to get from a longlist to a shortlist.

Read
AI governance

Seven questions to answer before your organisation rolls out generative AI

Generative AI tools are usually adopted before anyone has decided how to govern them. Seven questions to answer first, covering where AI is already in use, what data goes in, what the tools can reach, who checks the output, who owns it and which rules apply, and how to evidence the answers.

Read
Certification

Nine reasons ISO 27001 surveillance audits go wrong, and how to avoid them

Most ISO 27001 surveillance audit findings have nothing to do with new threats. They come from an ISMS that was parked after certification. The nine findings auditors raise most often, what each one means, and how to keep the system running between audits.

Read
Board-level resource hub

Guides for the people accountable for cyber risk.

The questions every Managing Partner should ask, how to report cyber risk to a board, cyber insurance renewal, Cyber Essentials Plus, supplier questionnaires and ransomware readiness.

Open the hub

Case studies

Named clients, real outcomes.

All case studies
Education, independent schoolSherborne Girls: securing remote and hybrid learning, without slowing it downAn independent school needed students and teachers to use the web and email freely and safely. We helped them raise their security posture and cut phishing, acting as an extension of their IT team.Read the story
Travel, luxury travel & experiencesBlack Tomato Group: stronger security and a leaner stack, at lower costA luxury travel group wanted to raise its security posture while optimising spend. We consolidated overlapping tools, ran a pen test, and deployed unified endpoint management, managing every vendor conversation for them.Read the story
Threat & regulation tracker

The deadlines worth a place in your plan.

DORA, the EU AI Act, NIS2, the UK Cyber Security and Resilience Bill, the EU Cyber Resilience Act, PCI DSS and more, with who each one affects and the dates that matter.

Open the tracker

Prefer a straight answer to a download?

A 30-minute call with a senior advisor will often get you further than any template. No prep, no pitch.

Book a call