Book a call

Lead & govern

Risk Management

Make informed decisions with confidence. Insight today, a safer tomorrow.

Discuss your requirements What's included

Overview

Effective security starts with understanding your risks: what could go wrong, how likely it is, and what it would cost the business.

I help you build a practical risk management process, aligned to ISO 27001, that informs investment and satisfies auditors.

Ideal for

  • Leadership teams prioritising security investment
  • Organisations implementing ISO 27001
  • Businesses without a maintained risk register

What's included

Scope of the service

Risk methodology

A simple, repeatable method for scoring and treating risk.

Risk workshops

Facilitated sessions to identify risks with the right people.

Risk register

A living register with owners, scores and actions.

Treatment planning

Practical options to reduce, transfer, avoid or accept risk.

Executive reporting

Clear reporting on top risks and trends.

Third-party risk

Assess the security of key suppliers and partners.

How it works

A clear, practical process

  1. 01

    Define

    Agree methodology, risk appetite and scope.

  2. 02

    Identify

    Run workshops to surface key risks.

  3. 03

    Evaluate

    Score and prioritise risks consistently.

  4. 04

    Treat

    Agree treatment plans and track progress.

Outcomes

What you can expect

  • Security spend focused where it matters
  • Clear risk ownership
  • Evidence for auditors, insurers and customers
  • Board-level visibility of cyber risk

Frequently asked questions

What tools do we need for a risk register?

A well-structured spreadsheet is often enough to start. If you already use a GRC platform, I can work within it.

How often should risks be reviewed?

Top risks should be reviewed at least quarterly, with the full register reviewed annually or after significant changes. Reviews can be built into a virtual CISO arrangement.

Related services

Virtual CISO

Strategic security leadership without the cost of a full-time Chief Information Security Officer.

Learn more

ISO 27001 Consultancy

Implement, certify and maintain an ISMS that works for your business, not just for the auditor.

Learn more

Gap Analysis

Understand exactly where you stand against a standard or framework, and what to fix first.

Learn more

Let's talk

Start your journey to a more secure tomorrow.

A free, no-obligation 30-minute discovery call to understand your goals and suggest the most practical next step.

Book a discovery call Email me