A practical, consultant led assessment that turns cyber uncertainty into clear direction. Through a structured discussion and review of ten security domains, we explore your people, processes and technology in the context of how your organisation works.
You receive a plain English executive report with your top five business risks, practical quick wins and a prioritised improvement roadmap. A dedicated readout helps you understand the findings and decide where to focus your time, effort and investment.
Ideal for business owners and leadership teams who want to understand their exposure without commissioning a complex technical audit. We start with how your organisation actually works.
We explore your business, systems, people and existing security practices through a guided questionnaire and discussion.
A prioritised view of the most important risks, with red, amber and green ratings explained in terms of business impact.
A plain English report covering people, process and technology, with practical recommendations and achievable quick wins.
We talk through the findings together and set out sensible next steps, proportionate to your organisation and budget.
Cyber Compass is an advisory assessment based on the information reviewed. It does not replace a technical penetration test or provide certification.
Explore the ten connected areas that shape your organisation’s cyber resilience. Each one helps us understand your risks and build a roadmap around what matters to you.
Hover over or select a segment to find out more.
Clear ownership turns security from a technical concern into a business priority.
Know who is accountable and where clearer direction would strengthen your organisation.
Your people make security decisions every day. We explore how well they are supported.
Focus awareness and education on the decisions that create the greatest business risk.
The right people should have the right access, with sensible protection around important accounts.
Identify where better access control could reduce avoidable exposure.
Laptops, phones and other devices are part of your organisation’s security boundary.
Understand the practical improvements that would make everyday technology safer.
We start with the information that matters to your business and the people who trust you with it.
Prioritise the protection of information whose loss or exposure would have the greatest impact.
A backup is useful when it gives you a realistic route back to operating.
Find gaps between having backups and being confident you can recover.
Preparation helps your team make clearer decisions when something goes wrong.
Clarify the preparation that would help you respond with less uncertainty.
Your resilience also depends on the organisations and services you rely on.
Understand your dependencies and where stronger supplier oversight would reduce risk.
Spotting unusual activity early gives you more time to understand and act on it.
Identify proportionate ways to improve visibility and avoid warning signs being missed.
Cyber resilience is ultimately about keeping the important parts of your organisation moving.
Connect security improvements to the services, people and operations you need to protect.
Together, these areas inform your priorities and the practical roadmap in your Compass report.
From the first conversation to a roadmap you can act on.
Understand your organisation, critical services and current concerns.
Work through a structured questionnaire and discuss the arrangements in place.
Review the findings, identify strengths and prioritise business risks.
Prepare your Compass report, quick wins and improvement roadmap.
Walk through the findings and options together and agree your next steps.
Practical answers about this service, its scope and the next step.
Explore all our answersCyber Compass is a consultant led review of your cyber security arrangements across people, process and technology. It explains your current position and turns the findings into practical business priorities.
We review ten domains: governance and leadership; people and awareness; identity and access; devices and endpoints; data protection; backup and recovery; incident response; third party risk; monitoring and detection; and business continuity.
You receive a Cyber Compass report, your Top 5 business risks, a colour coded view of your current position, practical quick wins and a prioritised improvement roadmap. A management readout helps you understand the findings and available options.
The assessment follows five steps: discovery, assessment, analysis, reporting and a management readout. We use a structured questionnaire and discussion to understand the arrangements in place and the evidence available.
Cyber Compass starts from £250. Your organisation’s size, complexity and review requirements determine the fixed fee. Scope and price are agreed before the assessment begins.
No. Cyber Compass is an advisory assessment. Technical testing, implementation and certification are separate services with their own agreed scope. Findings reflect the information and evidence available at the time of review.
No. You can use the roadmap with your own team or IT provider. If you want help delivering the improvements, Security Foundations turns the priorities into practical work across policies, documentation, controls and systems. You choose individually scoped modules with itemised fixed prices, or we can discuss an ongoing resilience programme.
Start with a free discovery call. Tell us what matters to your business and where you need help. We’ll listen, explore your priorities and help you find a practical way forward.
