Information risk and security consulting - mostly. ISO27k (ISO/IEC 27000 family of standards, 27001/2/3/4/5 ...) - strategy, planning, gap analysis, risk assessment, controls selection, ISMS auditing and management reviews, certification support, maturity management and more Strategy - preparing information risk and security management strategies, budget requests, business cases and implementation project proposals to support the organisation's business objectives and compliance requirements Metrics - measuring against and driving towards business objectives relating to information risk and security, privacy, trust, resilience etc. Policies - a complete, integrated suite of professionally-crafted information security policies, readily adapted for your organisation Awareness & training - creative content covering a wide range of topics, with streams for staff, managers and specialists