CyberLenses / Assurance

Verify and
Trust.

Put your defences to the test. Build confidence in your protection through evidence.

Explore Assurance

Security you can prove, not just assume.

Seven services that watch, test, respond, investigate and certify your security, so your confidence is built on evidence.

Our security operations centre watches your environment, investigates every alert and helps you contain threats fast.

  • Continuous monitoring by SOC analysts
  • Alerts investigated, not just forwarded
  • Managed detection and guided response

Four ways to test your defences, from a focused test to a full adversary simulation, with proof of what held.

  • Penetration testing: exploitable weaknesses found and proven
  • Red teaming: a goal-based attack, run like a real adversary
  • Purple teaming: our attackers and your defenders tune detection together
  • Attack simulation: controls tested against known attack techniques

When an attack hits, our responders help you contain it, remove the threat and get the business running again.

  • Rapid triage and containment
  • Threat removed and systems restored
  • Lessons learned to stop it happening again

When an incident happens, we preserve the evidence, rebuild what happened and find the root cause.

  • Evidence preserved with chain of custody
  • Attack timeline reconstructed
  • Root cause and clear recommendations

We guide you from gap analysis to certification, and build an ISMS your team can run.

  • Gap analysis and risk assessment
  • Policies and Statement of Applicability
  • Internal audit and certification support

Track every framework you report against in one place, with controls, owners and evidence kept current.

  • Controls mapped across frameworks
  • Owners and evidence for every requirement
  • Audit-ready at any time

Turn your people into a line of defence with training and realistic phishing simulations.

  • Role-based awareness training
  • Realistic phishing simulations
  • Progress measured by department
MDR & SOC · LIVE ALERT QUEUEALERTSTATUSSuspicious login, new countryTriaged by a SOC analystContainedRansomware behaviourTriaged by a SOC analystContainedUnusual data transferTriaged by a SOC analystInvestigatingMalicious attachmentTriaged by a SOC analystContainedScan from known bad IPTriaged by a SOC analystBlockedTIME TO CONTAIN38 minTHIS MONTH1,284alerts reviewed7real incidents handled
CONTROLS VALIDATION · SIMULATED ATTACKSCONTROLATTACK TESTEDEmail filteringPhishing payloadBlockedEndpoint protectionRansomware sampleBlockedFirewall rulesC2 beaconDetectedMFAPassword sprayingBlockedData loss preventionData exfiltrationMissedLogging & alertingPrivilege escalationDetectedEFFECTIVENESS83%5 of 6 controls heldGAP FOUNDExfiltration notstopped by DLPFix plan readyRe-test scheduled
INCIDENT RESPONSE · ACTIVE INCIDENTRESPONSE STEPSTATUSIncident detected09:14 · alert escalatedDoneThreat contained09:52 · affected hosts isolatedDoneThreat removed11:30 · malware and access clearedDoneSystems restored12 of 14 back onlineIn progressLessons learnedReview with your teamPlannedRESPONSE TIME15 minto responders engagedContainedRECOVERY86%systems restored
DIGITAL FORENSICS · INCIDENT RECONSTRUCTIONATTACK TIMELINE · REBUILT FROM EVIDENCE09:14Phishing emailopened09:21Malwareexecuted10:05Admin accountmisused11:40File serveraccessed12:02AttackercontainedEVIDENCE PRESERVEDDisk imagesMemory captureLogs from every sourceChain of custodyIndicators of compromiseROOT CAUSE FOUNDPhished admin credentialsused to reach the file serverReport deliveredFixes recommended
ISO 27001 · ISMS IMPLEMENTATION ROADMAPPHASE · PROGRESSGap analysisDoneRisk assessment & treatmentDonePolicies & Statement of ApplicabilityIn progressInternal auditIn progressCertification auditPlannedANNEX A CONTROLS81/93controls in placeEvidence readyNEXT MILESTONEInternal auditthen Stage 1 andStage 2 certificationOn track
ONE CONTROL, MANY FRAMEWORKSAccess reviewAsset inventoryIncident responseBackup testingSecurity loggingFramework A92%Framework B85%Framework C71%Gap: backup testing
SECURITY AWARENESS · PHISHING SIMULATIONSCLICK RATE · LAST 6 CAMPAIGNS24% → 6%First campaignLatestNEXT STEPNew campaign: invoice fraudTargeted refresher for the sales teamScheduledTRAINING COMPLETEDIT100%Finance96%HR90%Operations84%Sales70%

Know what works. Know what needs attention.

Every engagement is scoped to your environment, with no obligation.

Request an Assurance assessment

Our partners.