Three implementation levels over one ISMS core. Each level is cumulative: it includes everything in the previous one and adds capabilities that traditional consultancy usually leaves out.
Essential
For organisations looking to implement and sustain an ISMS that stays current and auditable.
Recommended
Advanced
For organisations moving from a reactive to a proactive posture: anticipating threats and knowing what they actually expose on the internet.
Complete
For organisations that treat security as one system, where technology, processes and people are managed with the same rigour.
capabilities by level
Advanced
Threat intelligence filtered against the client’s own technology stack and prioritised by criticality, fed into the ISMS risk cycle.
Advanced
Attack Surface Management: continuous monitoring of up to two IPs or domains that discovers and watches your real exposure on the internet.
Complete
Most incidents involve the human factor. We address it in a way that scales, can be measured and holds up under audit.
Complete
Controlled exercises to measure your people’s real exposure and how it evolves over time.
how to choose
If you need to implement and sustain your ISMS, Essential is the starting point. If you also want to anticipate threats and know your real exposure on the internet, Advanced adds intelligence and attack surface monitoring. And if you want to solve the human factor while leaving auditable evidence, Complete adds self-service training and phishing and social engineering exercises. Most organisations choose Advanced or Complete: that is where the ISMS stops being a compliance cost and becomes a real protective capability.
your business partner