About | thepracticalciso

- Prac-ti-cal -

Adjective: (of an idea, plan or method) likely to succeed or be effective and feasible in real circumstances.

___________________

About

The Practical CISO was established in 2016 with a single mission, to provide simple and clear guidance to organisations, enabling them to understand and manage their cyber security risks effectively and to a budget.

Organisations continue to suffer major security incidents often resulting in a loss of customer confidence and financial or regulatory penalties. This is despite investing significant time and money in the deployment of technologies. These incidents occur as a direct result of not having appropriate processes in place to ensure that the most fundamental security measures operate effectively to protect these organisations.

Uniquely, at the Practical CISO we are vendor agnostic and do not sell technology. Instead we focus on maximising the value and security capabilities of your current technologies wherever possible. Where weaknesses are identified, we will provide recommendations to address these.

Additionally, we will ensure your organisation is equipped with the necessary knowledge and supporting processes to identify security risks & manage controls to reduce the likelihood of your organisation becoming the victim of a major security incident.

Our Approach

To ensure the successful delivery of our Client engagements, we have established five working principles to which we adhere, giving you the confidence to know that your requirements will be delivered:

Consider Business Risk – We take the time to understand your organisation and focus efforts on protecting the things which are most important to you;
Work to a Budget - We recognise that security costs money, which is why we always work to identify ways of meeting your security needs whilst minimising costs;
Outcome Focused – We start with an end in mind to ensure that we deliver to your exacting requirements;
Use Clear Language – We do not get tied up in technical jargon and instead look to de-mystify security by delivering advice and guidance in simple terms that is easily digestible by senior executives and other non-technical audiences;
Trusted Advisers– We will always operate with the upmost discretion and ensure confidentiality on all our engagements.