Resources

Useful, current, and free of sales theatre.

Our knowledge hub, the case studies behind our work, and a running tracker of the regulatory deadlines that actually matter. Want a personalised read? The 2-minute compliance readiness check is the fastest place to start.

Take the readiness check See all tools
A laptop, notebook and coffee on a desk

Knowledge hub

Long-form, plain-English, genuinely useful.

All insights
Two people reviewing notes and laptops together
Cyber insurance

The cyber insurance renewal checklist for boards

A board-level checklist for the weeks before a cyber insurance renewal: the controls underwriters now require, the evidence to gather, and the questions leadership should confirm before anyone signs the questionnaire.

Read
Advisors presenting to a leadership team in a boardroom
Board & governance

Cyber risk reporting for boards: what good looks like

How to report cyber risk to a board so it informs decisions rather than reassures: the metrics that matter, the ones to drop, a one-page format that works, and the cadence regulators now expect.

Read
A person signing a document at a desk
Compliance

What law firms should expect from supplier security questionnaires

Why clients now send law firms detailed security questionnaires, what they typically ask, the answers that win and lose confidence, and how to turn a recurring chore into a standing evidence pack.

Read
Board-level resource hub

Guides for the people accountable for cyber risk.

The questions every Managing Partner should ask, how to report cyber risk to a board, cyber insurance renewal, Cyber Essentials Plus, supplier questionnaires and ransomware readiness.

Open the hub

Case studies

Named clients, real outcomes.

All case studies
Education, independent schoolSherborne Girls: securing remote and hybrid learning, without slowing it downAn independent school needed students and teachers to use the web and email freely and safely. We helped them raise their security posture and cut phishing, acting as an extension of their IT team.Read the story
Travel, luxury travel & experiencesBlack Tomato Group: stronger security and a leaner stack, at lower costA luxury travel group wanted to raise its security posture while optimising spend. We consolidated overlapping tools, ran a pen test, and deployed unified endpoint management, managing every vendor conversation for them.Read the story
Threat & regulation tracker

The deadlines worth a place in your plan.

DORA, the EU AI Act, NIS2, the UK Cyber Security and Resilience Bill, the EU Cyber Resilience Act, PCI DSS and more, with who each one affects and the dates that matter.

Open the tracker

Prefer a straight answer to a download?

A 30-minute call with a senior advisor will often get you further than any template. No prep, no pitch.

Book a call