About RiskVane

RiskVane is a cybersecurity consultancy that helps small and medium-sized businesses take control of their cyber risk. We bring the senior security expertise that larger organisations take for granted, at a scale and cost that fits a business your size, and we explain it in plain language so your directors can make informed decisions.

Many of the businesses we work with can’t justify a full-time security manager, but know someone needs to be in charge. Our Fractional Security Manager / CISO service gives you a part-time head of security who reviews your controls every month, tells you which risks matter most and what to do next, answers your customers’ security questionnaires and helps your directors understand their responsibilities.

When a customer, tender, board or insurer asks for proof, we help you provide it. We prepare you for Cyber Essentials, ISO 27001 and other certifications with policies that fit your business, find the gaps before your assessment so you pass first time, and carry out independent audits of your own controls and those of your key suppliers.

We also help you spend wisely and prepare for the worst. Our patented Cyber Risk Quantification shows what a cyber attack could cost your business in pounds, so security and insurance decisions are based on the risk each pound actually reduces. And because an attack shouldn’t be the first time anyone reads the plan, we write incident response and business continuity plans and run practice exercises with your team.

We also partner with managed service providers (MSPs). Our white label service lets MSPs offer fractional CISO, compliance, audit and resilience services to their own clients under their own brand, with RiskVane providing the expertise behind the scenes.