Senior expertise. Exactly when you need it.

Experienced security and technology leadership, compliance support and independent due diligence. Engage us for a defined project, or for a set number of days each month.

Works well with Managed Cyber Resilience. Available on its own or alongside a plan. Every plan includes security leadership and compliance evidence, and Sentinel includes 8 hours a month of fractional CISO time. Consulting is for organisations that need more senior time, a one-off project or expert advice before they choose a managed service. See what every plan includes

Consulting

Senior help for the decisions that carry the most risk.

Growing organisations need senior security and technology judgement long before they can justify a full-time executive. Our fractional leaders join your leadership team for an agreed number of days each month.

Fractional CISO

A chief information security officer (CISO) leads your security programme. A fractional CISO does that part-time, for a fraction of the cost of a full-time hire.

  • Security strategy and roadmap
  • Board and investor reporting
  • Risk decisions and policy ownership
  • Answers to client security questionnaires
  • Leadership during a major incident

Fractional CTO

A chief technology officer (CTO) sets your technology direction. A fractional CTO gives you that senior judgement without a permanent hire.

  • Technology strategy and architecture
  • Build, buy and supplier decisions
  • Engineering team structure and practices
  • Technology budgets and roadmaps
  • Support for fundraising and growth

We prepare you for the standards your clients and insurers ask for, and we manage the evidence. The certification body makes the certification decision.

Governance, risk and compliance

We set up the policies, risk register, controls and evidence that your clients, regulators and insurers expect. Then we keep them current.

ISO 27001 readiness

We design your information security management system (ISMS), close the gaps and prepare you for your certification audit.

Cyber Essentials readiness

We check your organisation against the Cyber Essentials and Cyber Essentials Plus requirements, fix the gaps and guide you through assessment.

Client and supplier questionnaires

We answer security due diligence questionnaires from your clients accurately and quickly, and build a library of reusable answers.

Independent, evidence-based assessments for the decisions that carry the most risk: buying a business and trusting a supplier.

Technology due diligence for M&A

Before an acquisition or investment, we assess the target's technology, security, software, team and risks. You get clear findings, their cost to fix and their effect on the deal.

  • Architecture, scalability and technical debt
  • Security posture and incident history
  • Software quality, ownership and open-source licences
  • Team, processes and key-person risk
  • Integration risks and a 100-day plan

Vendor due diligence

Before you trust a supplier with your data or systems, we assess how they protect it. We review their evidence, ask the right questions and give you a clear risk rating.

  • Security controls and certifications
  • Data handling, location and sub-processors
  • Resilience and business continuity
  • Contract terms and responsibilities
  • Ongoing review of your critical suppliers

Ways to work with us

Ongoing support or a defined project.

We scope and quote each engagement individually. You can start with a project, then continue with a retainer or move to Managed Cyber Resilience.

Monthly retainer

A set number of days each month from a senior consultant who knows your organisation. Best for fractional leadership and ongoing compliance.

Fixed-scope project

Agreed deliverables, timescale and price. Best for readiness projects, assessments and due diligence.

Tell us what you need to decide.

Describe the challenge, the deadline and who needs the answer. We'll suggest the right engagement and send you a quote.