Fractional security lead
An experienced Head of IT Security for a few days a month: strategy, roadmap, board reporting and a steady hand when it matters.
Learn moreIT and information security consultancy
Security leadership without the full-time overhead.
GW Consult helps UK organisations understand their risk, meet the standards their customers ask for, and build security that holds up in practice. Senior, hands-on and independent.
Head of IT Security experienceSenior judgement on your side, without a senior salary.
Independent adviceNo vendor quotas to meet. We recommend what fits you.
Plain EnglishFrom the first call to the final report.
What we do
Practical security, sized to your organisation.
Five services, one standard: work that reduces real risk and stands up when a customer, insurer or auditor asks.
Compliance readiness
Cyber Essentials, Cyber Essentials Plus and ISO/IEC 27001, plus the security questions in customer due diligence, without drowning in paperwork.
Learn moreAssessments and testing
Independent security and Microsoft 365 reviews, vulnerability management, and penetration tests scoped, managed and followed through.
Learn morePolicy, awareness and incidents
Policies people read, awareness and phishing programmes that change behaviour, and incident plans tested before you need them.
Learn moreSourcing and supply
Tell us what you need and we source and supply the hardware, software and licensing, chosen with security in mind.
Learn moreNot sure which you need?
A short call is usually enough to point you in the right direction. No obligation, no sales script.
Featured product
Portcullis. Closed by default. Open on purpose.
Removable storage control for Windows endpoints, on an appliance that runs on your own network. USB sticks, drives and phones stay blocked until someone decides to open them, for one device, one person and a set time.
- Storage blocked by default; keyboards, mice and printers left alone
- Access granted for one drive and a set time, then it ends on its own
- Every connection and decision in an audit trail endpoints cannot write to
- Runs on your network, with the licence validated offline
Device activity
USB storageFIN-LT-014 · 09:14
BlockedUSB keyboardOPS-DT-003 · 09:12
AllowedUSB storageSAL-LT-022 · 08:57
Granted, 4 hoursMobile phoneHR-LT-007 · 08:41
BlockedIllustration
How we work
Clear advice, then the work done.
01
Understand
A short call and a look at where you are now: your risks, your obligations, and what your customers are asking for.
02
Prioritise
A clear plan, in order, with costs. The few things that matter most come first.
03
Deliver
Hands-on work, or support for your own team, until it is done and you can show it.
Insights
Practical notes on security.
Compliance
Cyber Essentials: what it covers and how to pass first time
The five technical controls, what changed in the current requirements, the questions that catch people out, and how to prepare without a scramble.
Device control
Why USB device control still matters
Removable media is still one of the easiest ways for data to leave and malware to arrive. What to control, and how.
Email security
SPF, DKIM and DMARC: check your email security in 15 minutes
Three DNS records decide whether criminals can send email as you. How to check yours, and what good looks like.
Not sure where to start?
Tell us what is worrying you and we will point you in the right direction.