Engagement / Ops
I work with senior leaders in regulated and high-stakes environments — translating complex technical exposure into clear, defensible recommendations boards and regulators can act on.
Sectors
Services / Menu
Independent counsel for boards and executive teams on cyber and operational risk where the stakes are real and the decisions are visible.
Operational technology and industrial control system assessments built around real cyber-physical risk, not IT-style frameworks bolted onto plants.
Pre-acquisition cybersecurity due diligence that surfaces value-destroying exposure before close — and structures remediation conditions when it does.
Senior security leadership on a fractional basis for organisations that need governance and strategy without a full-time hire.
Practical AI oversight for organisations deploying GenAI, agentic systems, and ML in regulated environments — calibrated to actually survive scrutiny.
Senior-level engagement when material incidents occur — the kind that need governance and communication discipline as much as technical response.
Method
01
A confidential call to understand the question you're actually trying to answer — not the question that's easy to scope.
02
Written scope with clear deliverables, time horizon, and what's explicitly out-of-scope. Fixed fee or retainer depending on shape.
03
Direct work with you and your team — no sub-contracted juniors, no boilerplate decks. Senior attention end-to-end.
04
Most engagements continue as a quarterly check-in, board cycle, or on-call advisor relationship. Optional, never a default.
Start here
Most full advisory engagements start with a single 30-minute conversation about the specific question you are sitting on. Self-serve booking — no email back-and-forth.
Strategic consultation
30 minutes. Your specific OT or AI security question. Direct, candid, non-sales.
Bigger than 30 minutes?