- Home
- Assessments & Advisory
- Center of Excellence
A security transformation in six phases,
with your capability built in.
The Cybersecurity Center of Excellence programme takes you from assessment to handover in six phases over six to twelve months, against a three-to-five-year roadmap, building your own team's capability at every step.
Transformation you own at the end of it.
A Center of Excellence is for organizations that need more than a fix. It is a full security transformation: we assess where you are, plan where you need to be over three to five years, implement the controls and operations to get there, train your people, test the result and hand it over.
The point is capability, not dependence. Your team works alongside ours in every phase, so by handover they run what we built. Where it makes sense, the programme converts to a managed service at the end, such as MSOC for monitoring or an IR retainer for response, so nothing falls over when the project team leaves.
- A baseline assessment of your programme, technology and people
- A three-to-five-year security roadmap your board can fund in phases
- Implementation of the priority controls, processes and operations
- Training for your team, from analysts to executives, built into every phase
- Testing of the result: technical, through exercises, and against the frameworks you answer to
- A structured handover, with the option to convert to a managed service
Six phases, each with its own decision point.
Assessment
A discrete first step: we baseline your programme against recognised frameworks and your regulators. You can stop here with a complete report.
Planning
A three-to-five-year roadmap, sequenced and costed in effort, with the first phase defined in detail.
Implementation
Controls, architecture and operations put in place, with your team working alongside ours.
Training
Your people trained on what was built, through SKULD awareness, technical training and leadership exercises.
Testing
Penetration testing, war gaming and tabletop exercises prove the programme works under pressure.
Handover
Your team takes ownership, with documentation, runbooks and the option to keep us on as a managed service.
The whole practice, in one programme.
Assess and advise
Gap, compromise and Microsoft assessments, vCISO leadership and Forseti GRC delivery.
Build and harden
Identity, zero trust, cloud, OT and network segmentation, implemented to the roadmap.
Detect and respond
MSOC, detection engineering and incident response readiness.
Test and train
Ragnarök penetration testing, Vigriðr war gaming and SKULD training.
Who it is for
Enterprise and critical-infrastructure organizations with a board mandate to transform security, and leaders who want the capability to stay in-house when the programme ends.
- Gap assessment, the first phase, on its own
- vCISO, senior leadership throughout the programme
- MSOC, the managed service it converts to
- Cyber war gaming, Vigriðr, test the programme under pressure
What buyers ask.
That's a very large commitment.
It is phased. The assessment is a discrete first step, and every phase has its own decision point. You commit one phase at a time.
Will we just end up dependent on you?
No. Building your own capability is the point of the programme. Your team works alongside ours throughout, and handover is a phase in its own right.
How is this different from hiring several consultancies?
One roadmap, one accountable team, one set of priorities. The assessors, implementers, trainers and testers work from the same plan instead of handing reports to each other.
Why six to twelve months?
It depends on your starting point and scope, which the assessment phase establishes. The roadmap behind it runs three to five years, so the programme delivers the foundation and your team carries it forward.
Start with phase one.
Talk to us about your mandate and timeline. We will scope the assessment phase with you, no charge, no commitment.