About H Change
Experienced security. Applied proportionately.
H Change helps small and medium-sized organisations improve cyber security without making it unnecessarily complicated. We bring experience from complex UK government and critical national infrastructure environments and apply it at a scale that makes sense for your organisation.
Why H Change
Good security doesn't need to mean more complexity.
Many smaller organisations know cyber security matters but do not have a dedicated security function or specialist sitting internally. They may be responding to customer requirements, improving policies, training their people or simply trying to understand whether what they already have is good enough.
H Change exists to give those organisations access to experienced cyber security support without immediately needing to build an internal security function or engage a large consultancy.
We start with your organisation, not a predefined solution. We identify what matters, prioritise what will make a difference and help put sensible security arrangements in place.
Founder-led
Experience behind the advice.
H Change was founded by Andrew Hedley, who has more than a decade of experience working across security, communications and organisational change within UK government and critical national infrastructure environments.
His work has focused on making security practical. From security awareness and policy to risk, assurance and incident communications, much of that experience has involved turning complex security requirements into something people and organisations can understand and act on.
H Change was created to bring that experience to smaller organisations that need specialist cyber security support without necessarily needing that capability in-house.
CISM
Certified Information Security Manager
APM PMQ
Project Management Qualification
10+ years
Security experience
UK Government & CNI
Experience in complex and security-sensitive environments
Our approach
Experienced. Practical. Proportionate.
Experienced
Security advice informed by more than a decade working in complex UK government and critical national infrastructure environments.
Practical
Recommendations should lead to action. We focus on improvements that can realistically be understood, owned and implemented.
Proportionate
A 50-person organisation does not need the same security operating model as a major government department. Security should reflect your risks, requirements and resources.
Built for smaller organisations
The experience of a specialist. Without building a security function.
For many SMEs, employing a full-time cyber security specialist is neither necessary nor proportionate. But there are times when specialist experience matters.
A customer may ask difficult security questions. Policies may need updating. People may need training. A framework assessment may be required. Or leadership may simply want confidence that the organisation is focusing on the right things.
H Change provides access to that expertise when it is needed.
What we believe
Principles behind the work.
Security should support the business
Security exists to help organisations operate safely and confidently, not create unnecessary barriers.
People need clarity
Policies, training and advice should tell people what good looks like and what they need to do.
Priorities matter
Not every security issue carries the same risk. Organisations need to understand what matters most.
Improvement beats perfection
Good cyber security develops over time. Sensible, prioritised improvements are more useful than an unrealistic pursuit of perfection.
Services
How H Change can help
Four service areas, each designed to be proportionate to the size and needs of your organisation.
Cyber Security Training
Help your people recognise cyber risks and make better security decisions.
Awareness · Phishing · Managers · Leadership
Learn moreProtectPolicies & Standards
Put clear and proportionate security expectations in place.
Policy development · Reviews · Policy suites
Learn moreAdviseCyber Security Advice
Access experienced security expertise when you need it.
Health checks · Risk reviews · Improvement planning
Learn moreAssessCyber Security Assessments
Understand your current position and prioritise improvements.
NIST CSF · NIS · Gap assessments
Learn moreFree 20-minute consultation
Start with a conversation.
You don't need to know exactly what cyber security support you need. Tell us about your organisation and what has prompted the conversation, and we'll help you understand the appropriate next step.