Coach CISO
Empowered Security: Master the Controllables
Improve the odds of success by reducing risk of loss. As coaches we educate, advise and influence activities with cyber risk implications. We drive innovation and instigate change to manage risk.
Technology provides the power to create knowledge and the power to create havoc, and internet connectivity means both those powers are accessible to all. We live in an age when one person sitting at one computer can imagine an idea, and take humanity to new heights. Yet, someone can sit at the same computer, hack into a computer system and paralyse a company, a city or a government.
Cybersecurity services
Leading organisations want guardrails and mechanisms that empower their people to make good decisions about the security risks to the data, technology and processes that they build, buy and/or administer. This encourages everyone to think critically, take initiative, navigate complexity, learn from mistakes and make decisions that strike a sensible balance of risk and reward based on expertise, organisational risk appetite and data.
cyber Strategy & Governance
Programmatic build of security controls
Skills development and exercising
Our Services
Strategy
Design and execute strategy and governance. Security strategy and governance to satisfy three goals:
- Clear articulation of the specific purpose of information security and how to optimise for your goals, resources and threats.
- Empower people to identify and assess risk and decisions within a span of control set by the Board and Executive.
- Mechanisms for teams to design for security and document what they are doing to prove to themselves and leadership that threats and risks are mitigated.
Programme
Comprehensive analysis and 3-year plan.
- An initial assessment of readiness from several possible perspectives, to be chosen by you. For example, are you concerned about cyber-insurability? Getting better rates and coverage on an existing cyber policy? A more robust cyber assessment to get you ready for investment, future regulations or growth?
- A plan to get there. We offer a comprehensive 3-year plan - headcount, budget, etc.
Skills
Cyber security is a collective action problem. It requires the right mindset, teamwork and skills.
- An assessment of skills and culture based on your HR policies, organisation structure and decision-making pre and post-incident discovery.
- A plan to organise your teams and attract, recruit and retain the talent needed to develop the protective, detective and response capabilities required to deliver cyber security and resilience.