Example engagements

What we find, and what happens next.

Three illustrative engagements, written to show the shape of the work. They are not descriptions of named clients; real engagements will only ever be described with a firm's written permission.

Accountancy · Cyber Essentials

Regional accountancy practice, 40 staff

Renewal was three weeks out. The test found an unpatched remote-access gateway and shared admin accounts on the practice server.

External and internal assessment run over two evenings
Gateway patched and admin accounts separated with the practice's IT provider
Re-test and closure report before the assessment date

Example outcomeFixed and re-tested in nine days. Passed Cyber Essentials Plus first time.

Legal · Insurance renewal

Two-office law firm, 65 staff

Insurer asked for evidence of vulnerability scanning and multi-factor sign-in. Testing showed it missing on a third of accounts and no email authentication in place.

Multi-factor sign-in rolled out office by office
SPF, DKIM and DMARC configured and verified
Evidence pack written to the insurer's questionnaire

Example outcomeEvidence pack accepted by the insurer. Premium held at the previous year's rate.

Financial advice · Client due diligence

IFA firm, 25 staff

A lender's supplier questionnaire needed an independent report. External footprint was clean; the internal network had two legacy servers still reachable.

Legacy servers identified and decommissioned
Internal network re-scanned to confirm closure
Report attached to the questionnaire response

Example outcomeLegacy servers decommissioned. Questionnaire returned with the report attached.

Every engagement starts with a question from an assessor, an insurer or a client, and ends with something you can hand back to them.