Interim & Fractional CISO.
The seat, held or defined — from a 48-hour triage to full interim mobilisation and ongoing fractional cover. And beneath it, the Behavioural Risk Intelligence Assessment: a time-boxed, evidence-led judgement on the risk no function reports. Every engagement, whatever its length, produces the same thing: a defensible judgement the board can act on.
Flat fee, fully scoped, no retainer. I go in independently, surface hidden and suppressed risk across IT, OT, ERP and customer IP, and deliver a boardroom-grade judgement and action plan. Most interim mandates start here.
Rapid deployment into a broken seat: post-breach, post-departure, post-sanction, or pre-exit. Stabilise the exposure, restore the board's confidence, hand over a function the permanent hire can run.
Board-level accountability without a full-time hire. Operating model defined, governance set, permanent role specified. Suited to PE-backed and mid-market companies where the function does not yet exist.
Independent and time-boxed, typically four to six weeks, fixed fee, agreed at scoping. This is not an audit, an investigation or management consulting. There is no recommendations deck and no transformation programme. The deliverable is intelligence: a judgement, its confidence and its evidence. The decision remains yours.
The target, the behavioural risk of concern, and what we need to learn — agreed with the executive sponsor. The access ask is defined and small: organisational records and consented interviews only. The content of private communications is never analysed.
Establish what normal looks like for the target, then gather evidence in deliberately separate lines: what the documents record, what people say, what is observed, what the data shows. No judgements are formed at this stage.
The methodology is applied in full. A judgement is issued only where independent evidence lines converge, with confidence stated and every conclusion traceable, briefed in person to the sponsor. Then it stops. No remediation proposal follows.
Behind every engagement sits SCRI — Strategic Capital Risk Intelligence — a structured method built over three decades inside institutions where risk is priced, not just reported.
Six streams examined in every environment: strategic, financial, cyber, operational, behavioural, and AI & data. Every finding converted into financial, legal and operational consequence. No vulnerability lists. One judgement the board can act on.