Services

A diagnostic can usually mobilise within two weeks of a signed engagement letter. Delivery squads take four to six weeks, because we staff them with named people rather than whoever is free.

Yes, and it is written into the contract. If we need to change a named individual, you get thirty days notice and a named replacement you can interview before they start.

Routinely. Most of our programmes involve at least two incumbent vendors. We are explicit about where their interests and yours diverge, and we put that in writing rather than in a corridor conversation.

Every engagement has an exit plan from week one: who owns what, which runbooks exist, and what your team needs to be able to do unaided. We will not sign an engagement that depends on us staying.

Retained tiers absorb scope movement inside the agreed capacity. Anything that needs more capacity is quoted at the published tier rate — there is no premium for a change request.

In almost all cases, yes. We are ISO 27001 certified, hold Cyber Essentials Plus, and have SC-cleared staff available. Our standard DPA is available before you ask for it.

We will link a portion of fees to agreed outcomes on programmes above £1m, provided the measures are objective and already instrumented. We do not take equity.

Then that is what the report says, and the engagement ends there. It has happened eleven times. Four of those clients came back with a different problem we could actually help with.