Colonial Pipeline
2021 · USOne compromised VPN password shut down the largest fuel pipeline in the US, triggering shortages along the East Coast.
45% of East-Coast fuel haltedCertification is not security.
Most advisors sell you a checkbox. I build a tailored approach around your needs, your risks and your objectives — guiding you through certification and audits while helping you reduce risk, with Big Four rigour and strict confidentiality by default.
Worldwide · Confidential by default · NDA on request
01The risk you're actually carrying
Your organisation is already under attack. The only question is whether anyone is watching.
Attackers scan continuously and automatically for the one unpatched server, the reused password, the supplier with a weak link into your network. A single quiet gap is all it takes.
1,636
average cyberattacks per organisation, every week
Check Point, Q2 2024
$4.88M
global average cost of a single data breach
IBM, 2024
68%
of breaches involve a human element — a click, a password, a mistake
Verizon DBIR, 2024
Days → Months
typical time between an attacker getting in and anyone noticing
Industry reporting
02When it's industrial, it doesn't stay digital
In an office, an attack costs data. In a plant, it moves in the physical world.
Ukraine power grid
2015 · UAAttackers took control of substation systems and switched the power off remotely, in winter.
~230,000 without powerTriton / safety systems
2017 · Middle EastMalware built to disable the safety instrumented systems of a petrochemical plant — the last line before an explosion.
Targeted human safetyNotPetya → Maersk
2017 · GlobalCollateral damage from a wider attack froze a global shipping giant: thousands of servers and laptops rebuilt.
Ports stalled for days03Services
Pick where it hurts.
01AI & Agentic Governance
02OT/ICS Security
03Cyber Strategy & Risk
Book a scoping call
Confidential by default · Worldwide · ENG, ES, FR, AR (understanding)
04The process
How it works.
PHASE 01Discovery CallInitial consultation · 30 minutes
Discuss your organisation, current cybersecurity challenges, business objectives, and the reason you are seeking support. Establish whether the engagement is a good fit and identify the next steps.
Outcome: Initial understanding of needs and potential engagement.
Book a callPHASE 02Scoping & ConfidentialityRequirements · Scope · NDA
Establish confidentiality arrangements and define the engagement's objectives, requirements, organisational context, infrastructure, relevant systems, stakeholders, constraints, and expected timeframe.
Agree on the scope of work, responsibilities, methodology, fees, and deliverables before the engagement begins.
Outcome: Agreed scope of work, timeline, and engagement proposal.
PHASE 03Assessment & Implementation SupportAnalysis · Mapping · Integration
Assess the existing cybersecurity posture, map relevant systems, processes, risks, and controls, and identify gaps against the agreed requirements or applicable frameworks.
Develop prioritised recommendations and support the organisation in integrating agreed security controls, governance processes, and remediation measures.
Outcome: Documented findings, risk and gap analysis, and a prioritised action plan.
PHASE 04Delivery & Knowledge TransferFinal deliverables · Handover
Present the findings to relevant stakeholders, deliver the agreed documentation, review recommendations and priorities, and provide guidance on next steps. Where agreed, support implementation follow-up and progress tracking.
Outcome: Final deliverables, stakeholder handover, and a clear roadmap for ongoing improvement.
05Not sure what you need?
Tell me where you are. I'll tell you where to start.
What's the situation?
See contact card