Consulting
Consulting: assess and design.
Senior consultants assess where you stand and design what comes next, across cybersecurity, data protection and AI.
Consulting is where most engagements start: an assessment, a gap analysis or a DPIA that ends in clear decisions and a prioritised roadmap. You can implement the result with your own teams or with our professional services.
Service domain 1
Cybersecurity
What consulting covers in this domain
- Cloud security assessment
- IAM and PAM strategy and roadmap
- ISO/IEC 27001 and NIS2 gap analysis
Consulting in each service
- Cloud Security
We assess your cloud architecture and applications and give you a prioritised plan, from strategy and migration to secure baselines. - Identity & Access Management
We assess your identity and access set-up and design an IAM and PAM strategy and roadmap that fits your organisation. - Privileged Access Management
We find your privileged accounts, assess the risk and design a PAM strategy and roadmap. - Security Strategy & GRC
We assess your security governance against ISO/IEC 27001, NIS2 and DORA and set the strategy, target architecture and roadmap.
Service domain 2
Data Protection & Privacy
What consulting covers in this domain
- GDPR and APPI gap assessment
- DPIAs
- Records of processing
Consulting in each service
- Privacy Programme (GDPR and APPI)
We run the GDPR and APPI gap assessment and build your records of processing, policies and roadmap. - DPIA & Privacy by Design
Our privacy consultants carry out DPIAs and advise your data protection officer and project owners on each decision, including for AI uses. - Data Discovery & Classification
We define your classification scheme and assess where sensitive data sits and who can reach it. - External Data Protection Officer
We assess whether you need a DPO and where your data protection stands before the appointment.
Service domain 3
AI Security & Governance
What consulting covers in this domain
- AI Readiness Assessment
- EU AI Act role and risk classification
Consulting in each service
- AI Readiness Assessment
Our consultants run the assessment with your IT, security, data protection and legal teams and give you an independent view of where you stand. - EU AI Act Compliance
Our consultants classify your AI systems, interpret the obligations for your role and design the governance model with your legal, compliance and IT teams. - AI Risk Management & ISO/IEC 42001
We assess your current AI risk practice against ISO/IEC 42001 and the NIST AI RMF and give you a prioritised roadmap. - AI Security & Red Teaming
Our security consultants model the threats, review the architecture and advise on secure design for copilots, agents and AI applications.
How a consulting engagement runs
- Scope
In a scoping call we agree the questions, the scope, the people involved and the timeline.
- Assess
We interview your owners, review documents and run automated checks against your systems.
- Decide
We present findings and options with a recommendation and discuss them with the decision makers.
- Plan
You get a prioritised roadmap with effort, owners and quick wins.
Frequently asked questions
How long does a consulting engagement take?
It depends on the scope. The AI Readiness Assessment runs three to six weeks depending on the package; gap analyses and DPIAs are scoped in the first call.
Do we have to buy the implementation from you?
No. The results are yours, and many clients implement them with their own teams or existing partners.
Who does the work?
Senior consultants, supported by AI automation for discovery, classification and evidence collection. Decisions stay with your owners.
Can you work alongside our existing advisers?
Yes. We agree at the start who owns which part, so nothing is done twice.
Consulting · Professional services · Managed services
Start with a 30-minute AI risk conversation.
A senior consultant replies within one business day. Or join the 3–5 design partners shaping the platform before launch.