HIPAA Readiness For A Regional Provider
Mapped a fragmented control environment across twelve clinics, closed 43 findings in four months, and carried the client through a clean external assessment.
- GRC
- HIPAA
- Remediation
Portfolio
Work We Can Talk About
Client names stay confidential. The problems, the approach and the outcomes do not.
Discuss Your ProjectRed Team Against A Payments Platform
An assumed-breach exercise reached domain administrator in nine days through a chain of misconfigured service accounts. All paths were closed and retested within the quarter.
- Red Team
- Active Directory
- Retest
Segmentation For A Multi-Site OT Network
Replaced a flat plant network with a segmented architecture separating operational technology from corporate IT, with monitoring at every boundary.
- Network
- OT/ICS
- Architecture
SOC 2 Type II In Under A Year
Built the policy set, evidence pipeline and control ownership model from scratch, then ran the observation window alongside the client’s engineering team.
- SOC 2
- Audit
- Automation
Phishing Resilience Programme
Continuous simulation and coaching cut click-through from 31% to under 4% across eighteen months, with reporting rates rising in step.
- Awareness
- Simulation
- Metrics
Cloud Migration Under NIST 800-171
Designed and delivered a compliant landing zone, migrated 60 workloads, and left continuous posture monitoring in place for the in-house team.
- Cloud
- NIST
- Migration
Need Help?
Book a Consultation
Tell us what is keeping you up at night — an audit deadline, a cloud migration, a board asking hard questions. We will tell you honestly whether we can help, and what it takes.
What happens next
- 1You send us the detail — a short message, or the intake form if the engagement is already taking shape.
- 2We reply within one business day, and tell you honestly if we are not the right fit.
- 3A scoping call, then a fixed-price proposal covering the work, the reporting and the retest.