Home / Risk solutions / Cyber risk
Cyber risk
Cyber risk is now a compliance and third-party risk issue. We assess how your organization and your vendors protect data, and whether your controls meet the standards regulators and clients expect.
Risks we address
- Security weaknesses at vendors and service providers
- Data protection and privacy obligations
- Weak access control and identity management
- Unprepared incident response and breach notification
- Ransomware and business email compromise exposure
- Sector-specific cybersecurity regulation
How we help
- Vendor cybersecurity due diligence and evidence review
- Gap assessments against ISO/IEC 27001, NIST CSF 2.0 and SOC 2 criteria
- Data protection reviews for GDPR and US state privacy laws
- Incident response plans and tabletop exercises
- Policy, governance and board reporting reviews
- Scoping and review of technical testing with your chosen specialist
What you receive
Cyber risk assessment
Your control maturity against the framework that fits your business.
Vendor risk findings
Which third parties need attention, and what to ask of them.
Roadmap
Prioritised, realistic steps to close the most important gaps.
Standards we reference
ISO/IEC 27001NIST CSF 2.0SOC 2GDPR & UK GDPRNYDFS 23 NYCRR 500PCI DSS
Related services
Concerned about cyber risk? Let’s talk it through.
Tell us what you’ve seen and what decision is in front of you. We’ll propose a proportionate scope, timeline and fee.
Call+1 954 372 0334
Email[email protected]