07 · Advisory

Governance

A finding without an owner is likely to be forgotten. We help you put a practical rhythm around risk: a register someone maintains, policies staff can follow, supplier questions that are actually sent, and a report short enough for a council meeting, an executive or a board.

Governance works when each important risk has an owner, a date and a record.

Scope of work

  • 01

    A risk register with owners and review dates

  • 02

    Policies for access, incident, suppliers, and acceptable use

  • 03

    A meeting rhythm for the board, executive, or council

  • 04

    Supplier questions you can send this month

  • 05

    A decision log so choices survive staff changes

  • 06

    Reporting in a few pages, on a schedule

Deliverables

  • 01

    A register, policies, and a reporting template staff can use without rewriting

  • 02

    Named owners for the risks that matter

  • 03

    A cadence that fits a monthly or quarterly meeting

  • 04

    An initial pack that can be tabled as written

Engagement. A working rhythm sized to the meeting you already have.

Suitable for. Organisations whose security work is substantive but informal, and who need it to survive a change of staff or a question from the executive.

Contact

Talk to us about governance.

Book a call about the system, your sector, and what you need to achieve.

Book a call