AEGIS CYBERTECH
Request a consultation

Cybersecurity and technology advisory

Know your risks. Decide what comes first.

Clear priorities and documented decisions for your security and technology risks.

Request a consultationSee what you receive

Reference frameworks we work from

  • NIST CSF 2.0
  • CIS Controls v8
  • ISO/IEC 27001
  • Registered US LLC · New Mexico

Frameworks we apply, not certifications held.

What you leave with

Three outcomes, each one in writing.

  1. An IT manager and an advisor mapping systems on a whiteboard01

    Exposure mapped

    What you run and where you are exposed.

  2. Two colleagues ranking printed pages and index cards on a table02

    Controls prioritised

    What to fix first, and what can wait.

  3. An executive reading a bound report in a boardroom03

    Evidence others can read

    Documents a board or insurer can follow.

What you receive

Evidence you can hand to a board or an insurer.

Confirmed in your written proposal.

  • 01

    Risk register

    Each risk rated, with a named owner.

  • 02

    Control-gap map

    Your controls against good practice, gaps ranked.

  • 03

    Third-party review

    What each supplier can reach, and what to ask next.

  • 04

    Incident playbook

    Who decides and who is called when something fails.

Before and after

From exposed to defensible.

Illustrative scenarios, not client cases.

Before

  • Spending driven by vendor calls
  • No view of who can access what
  • Questions answered from memory

After

  • Ranked improvements, with reasons
  • Access documented, with owners
  • Written evidence, ready on request
A finance director and an advisor reviewing a paper questionnaireIllustrative scenario
Insurance renewal
Situation
A cyber-insurance questionnaire nobody can answer.
Delivered
Control-gap map, risk register, board summary.
Timeline
3–4 weeks
A founder and an advisor talking at a standing tableIllustrative scenario

Customer security review

Situation
A key customer asks for evidence before signing.
Delivered
Evidence pack and third-party review.
Timeline
2–3 weeks
A commercial building facade under an overcast skyIllustrative scenario

Supplier access review

Situation
A former IT supplier still holds admin access.
Delivered
Access review and decision record.
Timeline
4–6 weeks

Not offered: incident response, monitoring, penetration testing or certification.

Risk briefings

Short notes for the people who decide.

Third parties

A hand closing a server room door with a key card

The supplier you stopped using may still have access.

Offboard suppliers the way you offboard employees.

Recovery

A technician checking a rack of backup drives

A backup is a promise until you restore from it.

Test a full restore before you need one.

Identity

Hands holding a phone and a hardware security key

Multi-factor authentication, and the exceptions nobody remembers.

Every excluded account needs only a password.