-JS-20240807%20PNG.png)
SERVICES
Everything I do.
Nothing you don’t need.
Pick a starting point. Most clients begin with an audit or a health check, then decide what's next from what it finds. Prices are starting points, quoted up front, no surprises.
THE MAIN THREE
Where most people start.
01
ISO 27001 internal audit
An impartial clause 9.2 audit, pre-certification or annual. Clear findings, a board summary and a debrief on what to fix first.
From £2,250
ISO 27001 audits →
02
ISO 27001 implementation
Scope, risk assessment, policies people read, controls that fit how you work, and an ISMS that keeps running after the certificate.
From £7,000
ISO 27001 implementation →
03
Fractional CISO
Senior security leadership from one day a month: questionnaires, board reporting, ISO 27001 and SOC 2, incidents and advice on demand.
From £1,500 a month
Fractional CISO →
ALSO ON THE MENU
The rest of the toolkit.
Cyber security health check
Fixed price
A scored review of your security against NIST CSF 2.0, from governance to recovery, in plain language for the board. You get a prioritised list of what to fix, and what you can safely ignore. Popular with retail and ecommerce brands after the 2025 retail attacks.
DPO retainer
From one day a month
An experienced Data Protection Officer on call. Subject access requests, records of processing, DPIAs for high-risk processing, training and internal checks on how personal data is handled.
GDPR audit
Point in time
A review of the people, processes and technology that handle personal data against UK GDPR, with a prioritised action list and help putting it right without tying you up in red tape.
Vanta & Drata, run for you
Managed compliance
I set up and run your continuous compliance platform, sit in your Slack, and make sure the controls in it are real, not just green ticks.
AI governance
Policies & risk
An AI use policy people will follow, reviews of the AI suppliers you already use, and a clear picture of where your data goes when someone pastes it into a chatbot.
Training & workshops
Staff & boards
Practical GDPR and cyber hygiene sessions for staff, leadership teams and charities. No scare tactics, lots of real examples.