Practices / Cybersecurity and Digital Risk
Practice
Cybersecurity and Digital Risk
Preparing institutions for the incidents they will face. We help boards and executives understand their exposure, strengthen their defences and rehearse their response, so that a serious incident is contained, reported and recovered from with confidence.
Capabilities
How we help clients
Clients engage these capabilities individually or in combination with other practices.
Cyber strategy and governance
Risk appetite, accountability and reporting set at board level.
Readiness assessment
Assessment against ISO/IEC 27001 and the NIST Cybersecurity Framework, prioritised by consequence.
Data protection and privacy
Compliance programmes for the data protection laws that apply to each client.
Incident response and simulation
Playbooks, decision rights and live exercises for boards, technical teams and spokespeople.
Third-party and supply-chain risk
Contracts, assurance and monitoring for the suppliers that hold data or run systems.
Resilience and continuity
Critical services identified, recovery targets set and continuity plans tested.
Our perspective
A serious breach is a technical event for hours and a governance event for months. Boards that have rehearsed their response recover faster, and keep the confidence of customers and regulators.
Incident simulation
Rehearsing the first hours of a breach
Our simulation runs a realistic incident in real time, with directors, technical leads and spokespeople taking the decisions that would fall to them.
Detection
An ambiguous alert. Who declares an incident, and how quickly does the chief executive hear?
Containment
Systems isolated, evidence preserved, and a choice between keeping services running and stopping the spread.
Notification
Regulators, customers and partners told what they must be told, within the time the law allows, in words agreed in advance.
Recovery and review
Services restored in the right order, and an honest account of what failed, published to those who need it.
Our latest insights
Cybersecurity and Digital Risk
Before the breach: seven questions a board can ask this quarter
The decisions of the first hours are made long before the attack. Directors can test them now.
Education
GENIVY: founding an international guild of students
How Aldier designed an institution owned by its members, from its constitution to its campus.
Explore further
Related practices
Technology and Data
Systems and data that institutions can rely on.
Explore PracticeCommunications and Public Affairs
Earning the trust of the people who decide an institution's future.
Explore PodcastThe Aldier Podcast
Conversations with the people who build institutions. Season one coming soon.
ListenCybersecurity and Digital Risk
Connect with our Cybersecurity and Digital Risk practice
Tell us about the challenge in front of you. A partner will reply in confidence.