Service 03
Ongoing Protection Partner
Risks change as your business grows, staff come and go, suppliers change and new systems are introduced. Most SMEs cannot justify a full-time security or risk manager, but they still need someone senior keeping an eye on it.
As your Ongoing Protection Partner, we provide that independent oversight, working with your directors and IT provider on a regular, scheduled basis.
Who it is for
- Businesses that have addressed their main risks and want to keep it that way
- Boards that want regular, independent assurance on cyber and fraud risk
- Businesses that rely on an external IT provider and want an independent check on arrangements
What it covers
Areas we look at
Quarterly cybersecurity reviews
A structured review of key controls, changes and emerging risks each quarter.
Ongoing risk oversight
A maintained risk register and a short update for the directors.
Supplier risk reviews
Checking the security of key suppliers and the risks they introduce.
Financial fraud control reviews
Periodic checks that payment and bank-detail controls are being followed in practice.
Staff awareness
Refresher sessions and briefings when new threats emerge.
Incident response planning
Keeping your plan current, and running tabletop exercises with the leadership team.
Business continuity reviews
Making sure continuity arrangements keep pace with the business.
Coordination with IT providers
An independent, informed voice in conversations with your IT provider.
Important: what this service is not
- This is not a 24/7 managed security service or security operations centre (SOC).
- We do not provide round-the-clock monitoring or an emergency incident response call-out.
- We will help you arrange appropriate specialist incident response support in advance, so you know who to call.
How it works
A clear process from start to finish.
- 1
Baseline
We start from your review findings, or carry out a lighter baseline review.
- 2
Annual plan
We agree a calendar of reviews, training and exercises.
- 3
Quarterly cycle
Review, report, recommend, then follow up on actions.
- 4
Annual reflection
A year-end look at what has changed and what to prioritise next.
What you can expect
- A named senior contact who knows your business
- A scheduled programme of reviews agreed at the start of the year
- Short, board-ready updates on risk and progress
- Guidance by phone and email during business hours
FAQs
Ongoing Protection Partner: common questions
Is this a managed security service?
No. We do not provide 24/7 monitoring, a security operations centre or emergency call-outs. We provide independent, senior oversight and help you arrange specialist incident response support in advance.
What if we have an incident?
Your incident response plan will tell you who to call first. We can help you coordinate during business hours and support the business decisions, such as communicating with customers, suppliers and your bank.
Is there a minimum term?
We agree a minimum term at the start so the annual plan of reviews and training can be delivered properly. After that, it rolls on with a notice period.
Can we combine this with ISO 27001 maintenance?
Yes. Many of the activities overlap, such as risk reviews, internal audits and management reviews, so combining them is often efficient.
Other services
Related ways we can help
Business Protection Review
An independent review of your cybersecurity, financial controls and operational resilience.
From £1,495
02Security Improvement Programme
A practical, managed programme to fix the vulnerabilities that matter most.
£4,000 – £8,000
ISO 27001 consultancy
Practical ISMS implementation and certification readiness for customer and tender requirements.
Next step
Start with a conversation about your business.
An introductory conversation costs nothing. We will listen to where your business is heading, talk through what is holding it back and tell you honestly whether and how we can help.
30 to 45 minutes, by video or in person
At a time that suits you.
A conversation, not a sales pitch
We want to understand your business first.
A clear proposal
If we can help, you will know what we suggest and what it will cost.