Method
How I work,
step by step.
Three stages, no lock-in. The price is agreed before I start, and everything I produce stays yours.
The shape of an engagement
Deliberate, evidence-led, and easy to leave.
Most engagements begin small — a conversation, then a focused, fixed-price assessment. Some become an ongoing relationship; many don't need to. Either outcome is a good one.
What stays constant is the standard: senior judgement, evidence over noise, and work you can act on the day you receive it.
My process
Confidential briefing
A first conversation to understand your context, your obligations and your constraints.
Fixed-price assessment
A focused review of scope, gaps and priorities against NIS2 and, where relevant, the CRA.
Ongoing oversight
Security direction on a monthly retainer, sized to your company.
Principles
What holds, whatever the engagement.
Price before I start
Assessments are fixed-price and agreed up front. No open-ended meters, no surprises on the invoice.
You own the output
Reports, roadmaps and evidence are yours — usable with a board, an investor, an insurer or another advisor.
Independence, always
No vendor, no reseller margin, no referral fee. The recommendation is the one your situation deserves.
Proportionate by design
The response is sized to the risk and the company — never gold-plated, never thin.
What I don't do
Boundaries,
stated plainly.
- I don't sell hardware, software or managed services.
- I don't do body rental or staff augmentation.
- I don't take on engagements where I have a conflict of interest.