Security, compliance & zero-trust

Security work splits into two halves: the technical controls, and being able to prove they exist. Plenty of businesses have one without the other, which becomes a problem the moment a client, insurer or auditor asks.

I have run the investigation into a suspected data theft incident and designed the full zero-trust response across a Microsoft and CRM estate afterwards. I have also taken a business through Cyber Essentials certification and written the policies underneath it.

The aim is security you can maintain after I have gone, not a hardening exercise that decays in six months.

What this covers

• Conditional Access and multi-factor authentication done properly
• Zero-trust access design and privileged role tightening
• Microsoft Defender and endpoint protection configured to be useful
• Email security and phishing simulation programmes
• Patch management where none currently exists
• Cyber Essentials preparation and certification support
• GDPR, acceptable use, BYOD and asset management policies
• Incident response support if something has already happened

When this is the right fit

You have had a scare, a client is asking security questions you cannot answer, you need Cyber Essentials, or access has simply grown too permissive over the years.

What it costs

£750 – £2,000 — depending on scope.

That is a guide range, not a quote. You get a fixed price after a free 30-minute scoping call, and it does not move afterwards. I am not VAT registered, so there is no 20% to add on top. Full guide prices for every service are published openly.

How it works

A free 30-minute conversation first, so I understand the situation and you can judge whether I am the right person. Then a clear scope and a fixed quote or an hourly rate, agreed before anything starts. Work delivered, documented, and handed over.

Response times: within 2 hours during working hours, and never more than 24 hours.