Package · Cyber Foundations
The essential foundations, in one piece of work.
A practical package for organisations without an established security function, bringing together the essential people, policy and improvement foundations.
What's included
Four parts that work together.
Each element informs the next, so you finish with a clear picture, practical policies, people who understand them and a plan for the next 90 days.
Cyber Security Health Check
A structured review of your current arrangements, with concise written findings and recommendations prioritised as Now / Next / Later.
More about this serviceCore Cyber Security Policy Suite
Core policies agreed around how your organisation actually works, with an implementation walkthrough.
More about this serviceCyber Awareness Training
A live remote awareness session for your people, using practical examples relevant to their work.
More about this servicePrioritised 90-day improvement plan
Bringing together the findings from the Health Check, policy work and training into one practical plan setting out what to address first, what follows and where responsibility should sit.
Who it's for
Built for organisations that need to get the foundations right.
Cyber Foundations is designed for small and medium-sized organisations that know cyber security needs more structure, but don't need a full-time internal security function.
Responsibility for cyber security is shared between IT, operations or senior management.
Security policies are missing, outdated or don't reflect how the organisation works.
Employees haven't received practical cyber security training.
Customers, insurers or suppliers are asking more security questions.
Improvements are needed but it isn't clear what to prioritise.
Outcomes
What you'll have at the end.
A clearer picture of your current cyber security position, a practical set of core policies, employees who better understand their role in security, and a prioritised plan for what to improve next.
Clear findings
Know where the most important gaps are.
Usable policies
Policies designed around how your organisation works.
Better-informed people
Practical awareness relevant to everyday work.
A clear next step
A prioritised 90-day improvement plan.
Scope clarification. Cyber Foundations focuses on establishing practical security foundations. It does not include penetration testing, vulnerability scanning, certification or implementation of technical security products. Where specialist technical work is identified, we'll explain what is needed.
Free 20-minute consultation
Talk to us about Cyber Foundations.
A free 20-minute conversation to understand your organisation and whether the package is the right starting point. No preparation needed.