• Full Audit – 360 degrees

• Define a target operating model (to include People and Process)
• Gap analysis
• Review, develop and/or uplift Policies, Processes and Procedures

   (including governance and documentation) to ensure they are aligned with

   current industry standards, best practices, directives and regulations - Against

   any infosec or regulatory framework
• Risk Assessment
• Social engineering/social Media and Digital footprint exposure if required

   (see  below)

 

• Cyber Risk and Controls Health Check (mini audit)
 

• Remediation action plan
 

• Incident response plan
 

• Regular ‘Cyber Security’ intelligence report
 

• Best practice – Encryption, BYOD, remote/agile working
 

• Resilience, Business Continuity, Crisis Management, Disaster recovery  

   (impact analysis and recovery plans)