Security Architecture & Strategic Advisory
Tailored security strategies, risk assessments and architecture roadmaps aligned with your business goals and compliance mandates.
Typical triggers.
- aYou need a security strategy and roadmap the board will fund.
- bAn audit, incident or new regulation has exposed gaps in your architecture.
- cYou want senior security leadership without a full-time CISO.
Security investment is easier to approve when it follows a plan the board has agreed. We build that plan from evidence. A current-state assessment measures your maturity against the framework you use or need, whether NIST CSF, ISO 27001, the Essential Eight or CIS, and looks at the architecture behind it, not just the policies.
From there we define a target architecture for your sector and regulatory environment, drawing on SABSA and zero trust principles, and a prioritised roadmap from where you are to where you need to be. The executive briefing puts it in terms of risk and investment that the board can act on.
Delivering the roadmap can sit with your team, with us, or with both. If you need senior security leadership without a full-time hire, CISO-as-a-service (vCISO) provides ongoing governance, programme leadership and stakeholder communication.
- Current stateAssessed against NIST CSF, ISO 27001, the Essential Eight or CIS
- RisksWeighed in business context
- TargetTarget architecture
- RoadmapA prioritised roadmap
- GovernOngoing governance, vCISO optional
A plan the board can fund and the team can carry out
From where you are to a plan the board will fund.
A current-state assessment against the framework you use, a target architecture, and a prioritised roadmap between them, briefed to the executive. Ongoing governance is available as CISO-as-a-service.
Concrete deliverables, agreed before we start.
What you receive
- 01Current-state assessment against NIST CSF, ISO 27001, the Essential Eight or CIS
- 02Target architecture and a prioritised roadmap
- 03Executive briefing and board-ready reporting
- 04Optional CISO-as-a-service for ongoing governance
Credentials and references.
Reference calls with current clients on request.
ISO/IEC 27001:2022 certifiedInformation security management system
ASD Cyber Security PartnerAustralian Signals Directorate Cyber Security Partnership Program
Multiple CCIE holders including Cisco Emeritus. NSE8 (FCX) certified. Two-time APAC Fortinet Fabric Challenge champions, and #2 worldwide.
Case studies, videos and written references Fortinet credentialsStart with a
scoping call.
Tell us roughly what is in your environment and what prompted the question. We will say whether this is the right first step, and what it would cost.