SEC-01
AvailableBackup & Disaster Recovery
Testable backup, restore and recovery controls aligned to the organisation's critical services.
- Backup architecture
- restore tests
- recovery runbooks
All engineering disciplines
Security & Resilience
Cybersecurity & Resilience Engineering
Practical safeguards, recovery controls and incident readiness designed around business risk and operating reality.
Clear scope before delivery
Capabilities may be available directly, scoped for the project or require an assessment first. Timing, price, specialist roles and acceptance conditions are confirmed for the actual engagement.
- Capability areas
- 6 areas
- Delivery
- Confirmed for each project
- Continuity
- Support ownership agreed before launch
Discipline capabilities
Combine only what the operating requirement needs.
A capability can stand alone or connect with other disciplines as part of one architecture. Availability labels show how each capability can currently be engaged.
SEC-02
AvailableIdentity, MFA & Access Control
Least-privilege access, stronger authentication and controlled account lifecycle practices.
- MFA rollout
- role review
- account lifecycle
SEC-03
Scoped per projectFirewall & Network Segmentation
Network security boundaries that limit exposure and protect critical systems and sites.
- Firewall policy
- segmentation
- secure remote access
SEC-04
AvailableEndpoint Hardening & Patching
Practical endpoint standards, update controls and evidence for business devices and servers.
- Hardening baselines
- patch management
- endpoint controls
SEC-05
Scoped per projectSecurity Monitoring & Email Protection
Visibility and prevention controls for account, email, endpoint and service threats.
- Security alerts
- email safeguards
- log review
SEC-06
Scoped per projectIncident Readiness & Data Protection
Response plans, evidence, recovery roles and proportionate safeguards for sensitive data.
- Incident runbooks
- tabletop reviews
- data safeguards
Build the right delivery team