Cyber Resilience Baseline
Organisations needing a defensible starting position, quickly.
- Duration
- 2–4 weeks
- Tangible output
- Threat-informed maturity, Essential Eight and ISM mapping, critical gaps and action plan
- Decision enabled
- What reduces material cyber risk first?
- Accountable principal
- Sim Cuthbert
Week by week
A published flow, with a working cadence.
- 01Week 1 — threat-informed scoping
- 02Weeks 2–3 — control assessment and mapping
- 03Week 4 — prioritised action plan
What we need from you
- Policy set
- Control owner interviews
- Asset inventory
Explicit exclusions
- Penetration testing
- Certification
- Incident response retainer
Commercial and IP treatment
Price bands are scope-dependent and review-dated; we quote against agreed inputs rather than publishing a number that cannot hold. Client data stays in your tenancy where practical, and you own every deliverable we produce for you.
The next step is a scoped proposal. There is no obligation to continue past this engagement.
Review data handling