As we handle sensitive data, Cyber security has become a key part of our business. Implementing measures to safely and securely manage the data is a must. Practical Infosec added value by setting up our Information Security Policy and a risk register which was informed by conducting an extensive risk assessment, ensuring we focus only on the cyber risks and controls that count.

Data security is an important part of our business and as we operate in Fintech, it is an area we can’t afford to get wrong. Practical Infosec helped us conduct a comprehensive risk assessment and create an action plan on how to improve our data security controls. They are experts.

We needed someone to create and write a Business Continuity Plan for us and Ash delivered. What was particularly good? Proactiveness, communication with our team, understanding the business.

Ashley helped to identify the cyber security risks and threats to our business and provided recommendations on reducing cyber risk exposure. Ashley produced first rate work. He is calm, considerate, and very easy to work with. He gave us a thorough walkthrough of his security report, explained every security issue in detail, and gave us actionable steps to proceed with.

Ashley manages to make ‘technical speak’ sound understandable. He has a really comforting way of guiding any business leader through the steps of understanding, reviewing, prioritising and addressing cyber security risk. I love his bitesize approach to a big topic.

Because of a short-term deadline for an IT security audit we got in contact with Ash as he was able to assist us in a very short timeframe with the required policies, documents and advice. Ash demonstrated his expertise by helping us through the audit and is now working with us on an ongoing basis to help us improve our security.

Ashley was great – I would definitely recommend and will use him again. He calmly, knowledgeably and professionally went through our data security, asking the right questions and being pragmatic at the same time. Fulfilled the contract in the time agreed and to the budget agreed.

We needed a trustworthy 3rd party to complete a NIST CyberSecurity assessment for us. What was particularly good? The communication and helping us understand the process – fantastic.

I was worried I would be out of my depth in a cyber session but you are a great teacher (speaking as someone who was one for 30 years) and made everything so clear and straightforward and fun. The key to good learning, I always think.

I think the company itself, without your help, would have not been able to come up with a very concrete action plan toward improving their cybersecurity. For others operating in the SME and social impact space, your ability to design solutions for what we really need has been very useful.

Ash was damned good at cutting through the noise and focusing only on the security measures that truly mattered for our business. Beyond the security review itself, the process delivered real business value: we identified unused software and cancelled subscriptions, saving nearly $10k a year. Their advice also guided us in switching IT providers to one that better supports our systems, which has been a game-changer for our operations.