top of page
OUR FULL SERVICE CATALOGUE
Everything sits inside one method.
Our five-stage method is supported by four flexible service areas. Sustain brings together periodic risk reviews, ongoing assurance and expert advice to help maintain progress. Choose the services you need, when you need them.
A broad, independent view of your controls, threats and business risk.Â
1.1Â Cyber risk assessment & report
You receive:
Risk scorecard and recommendations
Measures change against an existing baseline, from us or another provider.
1.2 Re-assessment
You receive:
Progress against baseline, new scorecard
Cyber risks from changes such as AI, acquisitions or new systems.
1.3 Change-related risk assessment
You receive:
Risk of the change and recommendations
One area of your cybersecurity in detail, such as third-party security or access management
1.4 Security control deep dive
You receive:
Findings, gaps and recommendations
A tailored assessment for a specific need, such as acquisition due diligence.
1.5 Bespoke assessment
You receive:
Findings for the agreed scope
How exposed you are to one particular threat, such as ransomware.
1.6 Risk-specific assessment
You receive:
Exposure findings and recommendations
01. Assess
Our services are flexible. Choose the support you need: a single assessment, a specific improvement or ongoing expert advice.
Support Beyond The Assessment
02. Prioritise
Prepare the business cases, plans and documents to start delivery.
2.6 Delivery Materials
Define what cyber risks are reported to leadership and how.
2.5 Risk Reporting Design
Detail the tasks, resources and dependencies for each improvement.
2.4 Full Remediation Design
Develop the overall improvement plan, costs and timescales.
Help leadership agree which risks to address and what to fund.
2.2 Board prioritisation
Agree how each identified risk should be addressed.
2.1 Remediation approach
2.3 Planning support
03. Improve
Hand finished improvements over to your day-to-day teams.
3.5 Transition to Business As Usual
Establish clear responsibilities, decision-making and approvals.
3.4 Governance Support
Hands-on management of individual improvement projects.
3.3 Workstream Support
Track delivery progress, challenge delays and report risks and issues.
3.2 Programme Oversight
Set up the people, plans and reporting to start delivery.
3.1 Programme Mobilisation
Deliver the changes that reduce risk.
04. Assure
A one-off, evidence-based check that your controls work.
4.4 Independent Assurance
Scheduled reviews of key controls, not 24/7 monitoring.
4.1 Ongoing Control Assurance
Check your cyber strategy still fits your business and risks.
4.5 Strategy Review
Keep the evidence auditors, customers and insurers ask for.
4.2 Evidence Management
Produce and maintain the measures in your board report.
4.6 Board Metrics and KPIs
Get ready for a certification, audit or customer review.
4.3 Compliance Readiness
Know your controls are working, with evidence.
+ Other Services
Expert advice when a cyber question comes up.
5.5 On-demand Advisory
Help your staff and leaders spot and handle cyber risks.
5.4 Awareness and Training
Plan and rehearse how you would respond to a cyber attack.
5.3 Incident Readiness
What new threats mean for your business, and what to do.
5.2 Emerging Threat Review
A Senior Security Leader, part-time, for as long as you need.
5.1 Fractional CISO
Know your controls are working, with evidence.
5.1 Fractional CISO
5.2 Emerging Threat Review
5.3 Incident Readiness
bottom of page