Security Lights the Way

What we cover

Focus areas

Six connected disciplines. Governance sets direction; testing, awareness, intelligence and operations show whether it works in practice.

  1. Governance, Risk & Compliance

    How security programmes are governed, how risk is assessed and treated, and how frameworks turn into evidence.

    • Risk assessment and treatment
    • Policy and control design
    • Audit readiness and evidence
    • Multi-framework mapping

  2. Security Awareness Training

    Building awareness programmes that change behaviour — and meet the training expectations written into major frameworks.

    • Role-based training design
    • Measuring behaviour change
    • Framework training requirements
    • Security culture

  3. Penetration Testing

    How authorised security testing is scoped, governed and reported, and how findings feed risk decisions.

    • Scoping and rules of engagement
    • Testing methods
    • Severity rating and reporting
    • Remediation and retesting

  4. Phishing Simulation Campaigns

    Running ethical, consent-based phishing simulations that measure risk without punishing people.

    • Campaign design and ethics
    • Reporting culture metrics
    • Simulation vs real-world risk
    • Linking results to training

  5. Threat Intelligence

    Turning threat information into decisions: intelligence requirements, sources, analysis and sharing.

    • The intelligence lifecycle
    • Strategic, operational and tactical intelligence
    • Threat-led risk assessment
    • Regulatory and incident context

  6. Security Operations (SOC)

    How security operations centres detect, triage and respond — and the reporting duties that follow an incident.

    • Detection coverage
    • Incident triage and escalation
    • Breach notification timelines
    • SOC metrics and governance