CDCAT Consultancy

Maintaining a consistent and appropriate level of security is a highly complicated and intricate procedure. Too little leaves you vulnerable; too much could be unaffordable. From an enterprise perspective, managing a consistent level of security across an organisation that spans many offices, countries and cultures is complex.

CDCAT is the most sophisticated security and compliance capability assessment tool on the market. We have built a powerful database to deliver cyber defence capability including over 20 uniquely re-modelled industry standards to help you determine the right level of investment and prioritize cyber risks to meet compliance including ISO 27001, Cyber Essentials Plus, NIST, PCI-DSS, GDPR, HMG 10 Steps to Cyber security and many more at the click of a button.

CDCAT is the definitive means of measuring operational risk and managing and maintaining an effective cyber risk management strategy to drive your organisation's cyber transformation. For organisations that hold accreditations against a number of security standards, the different annual audits can cost tens of thousands. CDCAT enables assessments to be completed against multiple standards simultaneously, saving time and effort.

There is no other service available on the market which delivers the expertise and capability intelligence to provide actionable insights into an organisation’s security set up, direction and plan of action.

The packages comprise:-

Pre-consultancy - 1 on 1 Meeting with a CDCAT® approved consultant to:

• Discuss your current goals and security posture
• Review your organisation’s policies and procedures benchmarked against any pre-mapped security standard of your choice
• Compare your procedures and policies as an organisation against any of our bespoke security strategies

The CDCAT® Assessment 

Conducting interviews and gathering information with key security stakeholders, then performing the CDCAT Assessment.

The output, which is provided immediately from the tool, gives a full bespoke report covering:

1. Summary Report – A high level overview of your company, its weaknesses and areas for improvement
2. High Level Action Plan – Effectiveness of your current controls according to target and areas of improvement
3. Performance Indicators – Bespoke KPIs tailored to your company to meet your desired goals and timeframes (especially relevant for your technical team)
4. Additional Standard – A separate report assessment against an additional security standard
5. Assessment Data – Your data specifically mapped against the selected security controls (especially relevant for your technical team)
6. An action plan providing an overview of your blockers and weaknesses based on the TEPIMOIL mnemonic: Training, Equipment, Personnel, Information, Management, Organisation, Infrastructure and Logistics

Follow up Consultancy

Focussed discussion based on the results of the assessment

1. Developing a capability action plan tailored to your business, budget and desired risk
2. A comparison between your organisations risk appetite and the potential impacts of a Cyber-attack
3. The identification of the key control areas within your organisations to highlight your key vulnerabilities
4. Advice on how to increase your overall maturity level within your desired timeframe.
5. A summary of the potential financial risk

Our Annual service gives you the Oneshot service + plus three quarterly checks.

 Using the agreed action plan as a baseline:-

1. An independent review that you are on track with your previous maturity goals and actions
2. A full CDCAT ® assessment against the current controls which present the most risk