Start with the outcome, then choose the delivery model that fits the problem, pace and capability you need. Consulting, managed services, Academy and the platform can stand alone or connect over time.
Some clients need a focused advisory intervention. Others need ongoing capacity, a stronger internal team or a live operating system. We are built to support all four without forcing the next step.
Outcome-led expertise across all four practices. We sit across the table as a thinking partner scoped to decisions and outcomes, not hours and deliverables.
Specialist teams that operate risk, compliance, cyber, privacy, internal audit and resilience functions on a sustained basis.
We build the people who run the function after we leave — from boards and executives to practitioners and specialist roles.
Our connected governance and resilience platform — where frameworks can run as workflows, ownership, evidence, action and decision-ready reporting.
FalconryX is the intelligence layer used across selected consulting propositions and within the platform. It supports analysis, gap detection, prioritisation, scenario thinking, drafting and decision-ready reporting with human accountability retained throughout.
Consulting, managed services, Academy programmes and the platform can all use FalconryX where AI meaningfully improves speed, depth or continuity.
The four engagement modes are designed around the same journey from understanding the priority problem to building a capability that can keep working.
Leadership question, current state, exposure, ambition and decision requirements.
Operating model, governance, methodology, controls, scenarios and roadmap.
Workflows, ownership, data, dashboards, evidence and intelligence where technology adds value.
Ongoing operations, monitoring, simulation, improvement and capability transfer.
For clients that need ongoing capacity, cadence or specialist leadership, our managed portfolio keeps critical governance and control functions running while internal capability develops.
ERM cadence, compliance monitoring, policy governance, issues and executive reporting.
Framework monitoring, evidence health, risk treatment, remediation and governance reporting.
RoPA, DPIAs, privacy risk, rights workflows, incidents, awareness and accountability support.
BIA updates, plan maintenance, exercises, action tracking and critical-service oversight.
Planning, specialist audits, execution capacity, issue tracking and remediation follow-up.
vCISO, vDPO, vERM and vBCM leadership support where flexible senior capacity is required.
Start with the business need. Use only the delivery model that earns its place.
Start with Consulting.
Add Managed Services.
Use the Academy.
Operationalise through the platform.
Tell us the leadership question or operating challenge. We will recommend the smallest, clearest way to begin.