I help organizations close their most common security gaps with practical, well-documented work: endpoint protection, patching, vulnerability management, access audits, security policies, cloud and SaaS security, and compliance. Each engagement starts small, proves value in a pilot, and then scales.

I am a cybersecurity practitioner and instructor with hands-on delivery experience in threat intelligence, SIEM operations, EDR and patch-management rollouts, and penetration testing. This proposal sets out nine services, how each is delivered, and what you receive at the end.

Services at a glance

Nine services, each usable on its own or combined into one security-improvement programme. Durations are indicative and depend on the size of your environment.

SERVICE 01

EDR deployment                       

I deploy endpoint detection and response so you can see and stop behavioral threats that traditional antivirus misses. I have run this model with Sophos EDR, starting with a 50-device proof of concept before a company-wide phased rollout.

APPROACH

1. Assess the endpoint estate (laptops, servers, administrative systems) and agree success criteria.
2. Run a pilot on a representative device group to validate DLP, web control, application control and device control.
3. Tune detection policies to your environment to cut false positives and catch behavioral threats.
4. Roll out in phases, with coverage mapped across device types.
5. Hand over runbooks and train your IT team on alert handling.

SERVICE 02

Patch management deployment

I set up automated patching so known vulnerabilities are fixed before attackers exploit them. I have implemented Action1 cloud-native patch management, beginning with a controlled proof of concept and then scaling across the organization.

APPROACH

1. Inventory endpoints and installed software to find current patching gaps.
2. Pilot on a small device group and define patch rings and maintenance windows.
3. Configure automated deployment for operating systems and third-party applications.
4. Scale to the full estate and set up compliance dashboards.
5. Connect vulnerability scan findings to the patch backlog and run post-patch validation scans.

SERVICE 03

Vulnerability assessment

I identify, validate and prioritize weaknesses across your infrastructure and applications, so your team fixes what matters most first. Scans are run with tools such as Nessus and checked manually to remove false positives. In a recent web application assessment I found 8+ high and critical issues, including SQL injection, cross-site scripting and insecure file upload.

SCOPE OPTIONS

• Internal and external infrastructure scanning
• Web application assessment (automated plus manual testing)
• Recurring scans to keep a live vulnerability inventory

APPROACH

1. Agree scope, rules of engagement and testing windows.
2. Scan and enumerate assets and services.
3. Validate findings manually and rate them by CVSS score and exploitability.
4. Report with proof of concept and step-by-step remediation guidance.
5. Re-test after fixes to confirm closure.

SERVICE 04

Security audits and IAM access reviews

I check who has access to what, and whether that access is still justified. Excess and orphaned accounts are a common root cause of breaches and a frequent audit finding.

Reviews scale to organizations of any size and any number of applications, from a small business with a handful of systems to enterprises with hundreds of applications, across on-premises directories and cloud identity platforms such as Microsoft Entra ID, Okta, AWS IAM and Google Workspace.

USER ACCESS REVIEW

• Review accounts, groups and privileged roles in Active Directory and other directories
• Identify dormant, orphaned, shared and over-privileged accounts
• Check joiner, mover and leaver processes against actual access

APPLICATION ACCESS REVIEW

• Review access to business-critical applications against job roles
• Test for segregation-of-duties conflicts and excessive admin rights
• Confirm that application owners approve and recertify access

APPROACH

1. Agree the in-scope systems, applications and review criteria.
2. Collect access listings from system and application owners.
3. Compare actual access against roles and approved requests.
4. Report exceptions and agree clean-up actions with owners.
5. Verify that corrections were made.

SERVICE 05

GRC policy development

I write clear, usable security policies and procedures that match how your organization actually works, aligned to ISO/IEC 27001 and NIST practice. Policies are drafted for review by your management and tailored, not copied from generic templates.

TYPICAL POLICY SET

• Information security policy
• Access control and user access management policy
• Patch and vulnerability management policy
• Endpoint security and acceptable use policy
• Incident response and reporting procedure
• Backup, business continuity and disaster recovery policy
• Third-party and vendor security policy
• Data classification and handling policy

The exact set is agreed during scoping.

APPROACH

1. Review existing documents, risks and business context.
2. Run short interviews with IT, HR and management.
3. Draft policies and supporting procedures in plain language.
4. Revise with your feedback and prepare for management approval.
5. Brief staff and system owners on what the policies require.

SERVICE 06

Cloud security architecture and governance

I help organizations build security into their cloud environments rather than bolting it on later. Work covers AWS, Microsoft Azure and Google Cloud, from writing cloud security policies to reviewing architecture and setting up governance that keeps configurations secure and compliant as the environment grows.

SCOPE OPTIONS

• Cloud security policies and standards covering identity, network, encryption, logging and data residency
• Secure reference architecture and landing zone design or review
• Governance model: account and subscription structure, guardrails, tagging and policy-as-code
• Configuration review against CIS Benchmarks and cloud provider security best practice

APPROACH

1. Map cloud accounts, workloads, data flows and shared-responsibility boundaries.
2. Review current architecture and configuration against CIS and provider well-architected security guidance.
3. Write cloud security policies and standards tailored to your environment.
4. Design governance guardrails, roles and approval processes.
5. Hand over and help your team build the controls into deployment pipelines.

SERVICE 07

SaaS security health checks

Much of your business data now lives in SaaS applications such as Microsoft 365, Google Workspace, Salesforce and Slack, and their default settings are rarely the most secure. A health check finds misconfigurations, risky sharing and weak authentication before they turn into incidents.

WHAT I CHECK

• Authentication: MFA enforcement, single sign-on and conditional access
• Admin roles and privileged accounts
• External sharing, public links and guest access
• Third-party app integrations and OAuth permissions
• Audit logging, alerting and data retention settings

APPROACH

1. Agree the in-scope SaaS applications and arrange read-only access.
2. Review configuration against vendor security baselines and CIS Benchmarks where available.
3. Identify risky settings, sharing and integrations.
4. Score each application and prioritize fixes by risk.
5. Support remediation and re-check the fixed settings.

SERVICE 08

Compliance audits: NIST, HIPAA, FedRAMP and PII

I assess your controls against the frameworks your customers and regulators expect, show clearly where the gaps are, and help you close them before a formal audit or assessment.

FRAMEWORKS COVERED

• NIST Cybersecurity Framework (CSF) and NIST SP 800-53 control assessments
• HIPAA Security Rule risk analysis for organizations handling protected health information
• FedRAMP readiness assessments for cloud service providers selling to US federal agencies
• PII protection reviews: where personal data is stored, who can access it and how it is protected

APPROACH

1. Confirm the framework, scope and in-scope systems.
2. Collect evidence through document review, interviews and technical checks.
3. Map controls to framework requirements and rate each as met, partially met or not met.
4. Report gaps with risk ratings and remediation steps.
5. Build a remediation plan and track progress toward audit readiness.

Formal FedRAMP authorization requires assessment by an accredited third-party assessment organization (3PAO); this service prepares you for that assessment.

SERVICE 09

Security product consultation

Security tools are expensive and hard to replace once deployed. I give independent, vendor-neutral advice so you choose products that fit your risks, team and budget, and get full value from the tools you already own.

HOW I HELP

• Define requirements based on your risks and existing technology stack
• Shortlist and compare products for EDR, SIEM, patch management, vulnerability scanning, IAM, cloud security posture management (CSPM) and SaaS security
• Plan proofs of concept and build evaluation scorecards
• Review existing tools to find overlap, gaps and unused features

APPROACH

1. Understand your environment, risks, budget and team capacity.
2. Define requirements and evaluation criteria.
3. Shortlist and compare products against those criteria.
4. Run or oversee a proof of concept.
5. Recommend a product and support rollout planning.