04 Investigation & advisory
Cyber Awareness & Advisory
Intelligence that nobody acts on is expensive noise. The last step is the one most often skipped.
Start a pilotGeneric security awareness training fails because it is generic. People discount threats they cannot picture happening to them, and a module about phishing in the abstract does not change behaviour in a finance team that has just been shown a lookalike domain registered against their own employer.
We brief executives and staff on the threats that specifically apply to them — using findings from their own exposure assessment where one exists — and advise on the controls, habits and processes that close the gaps we found.
01 What you receive
Deliverables.
Every engagement produces a written, sourced deliverable — not a dashboard login you will never open.
- Executive briefing
- Threats specific to your organisation and your senior people, in plain terms.
- Staff training
- Phishing and social engineering, built around your own findings rather than stock examples.
- Control advisory
- Practical recommendations tied to the gaps the assessment surfaced.
- Readiness review
- What your response would actually look like if a finding became an incident.
02 Method
How it runs.
- 01
Ground it
Wherever possible we build on your own footprint or monitoring findings.
- 02
Brief
Executives first — they are the targets and they set the tone.
- 03
Train
Staff sessions using scenarios drawn from the real exposure.
- 04
Advise
Written recommendations, prioritised by risk reduction rather than by effort.
04 Common questions
Do you deliver this in person?
Both. Executive briefings are usually better in person; staff training works either way. We are based in Northamptonshire and work across the UK.
Do we need an assessment first?
It is not required, but it makes the training substantially more effective. Being shown a lookalike domain registered against your own employer changes behaviour in a way that a stock example does not.
Are you selling us security products?
No. We are not a reseller and we take no commission from vendors. Where a control gap needs a product we say so, and you procure it however you wish.
Tell us what you would want watched. We will scope a pilot on it, in writing, before anything is agreed.