Skip to content

Door one · Cybersecurity

What you get, stated as the outcome — not the activity

Six services for regulated institutions. Each is described by what changes for you; the deliverables and the method sit underneath.

Book your assessment Three ways to start

  • 02 · Compliance

    An examination stops being something you dread

    Regulatory Compliance Advisory — Bank of Zambia directives and the Data Protection Act 2021, mapped to real controls.

    Obligation register · Control mapping · Remediation plan

  • 03 · Frameworks

    You can credibly say you run an ISO 27001 ISMS

    ISO 27001:2022 & Global Framework Alignment — A certifiable ISMS against ISO 27001, NIST CSF, COBIT and ITIL.

    Statement of Applicability · ISMS documentation · Internal audit

  • 04 · Testing

    You know what an attacker would reach first

    Vulnerability Assessment & Penetration Testing — Tested exposure ranked by business impact, with retesting after fixes.

    Technical report · Executive summary · Retest certificate

  • 05 · Implementation

    The controls exist in your estate, not only in a policy

    Cybersecurity Architecture & Solution Implementation — Segmentation, PAM, SIEM and endpoint protection, deployed and handed over with runbooks.

    Target architecture · Cutover plan · Operating runbooks

  • 06 · People

    Your staff stop being the easiest way in

    Cybersecurity Awareness Training — Turn your people from the weakest link into your first line of defence.

    Training programme · Simulation results · Attendance evidence

How an engagement runs

Four stages, each with something you can hold

Whatever the service, the work moves through the same four stages — and every stage ends with a document, not a promise.

  1. Stage 01

    Posture review

    We review your current controls, policies and evidence against ISO 27001 and the directives that apply to you.

    Output: Gap summary

  2. Stage 02

    Scoped plan

    You receive a prioritised plan — what to fix, in what order, and who owns it — before any implementation is agreed.

    Output: Remediation roadmap

  3. Stage 03

    Implementation

    We implement alongside your team: policies, controls and tooling, with evidence gathered as we go.

    Output: Evidence pack

  4. Stage 04

    Validation

    Controls are tested and re-tested, and the result is reported to leadership in plain language.

    Output: Assurance report

Three ways to start

Pick the size of first step that suits you

  • Start here · Free

    Security assessment

    A 45-minute conversation and a written, prioritised view of where you stand. No obligation to go further.

    Book your assessment
  • Ongoing

    Advisory retainer

    Continuing governance, risk and compliance support — board reporting, policy upkeep and regulator-facing advice.

    Discuss a retainer
  • Scoped

    Project engagement

    A defined piece of work with an agreed scope and outcome — an ISO 27001 programme, a penetration test, an architecture build.

    Scope a project

Start with a picture

Book the free security assessment

Forty-five minutes, no obligation — and a written, prioritised view of where you stand. We reply within 24 hours.

Book your assessment Take the 2-minute Readiness Check