IT for FCA-regulated firms: controlled, documented, auditable
Identity and email security, SharePoint governance that respects information barriers, and changes you can show your compliance officer.
Book a 30-minute callHow we help
Conditional Access baselines
Multi-factor authentication (MFA) for everyone, legacy authentication blocked and device-code sign-in blocked, with break-glass accounts designed in.
Email security
Mimecast or Microsoft 365 email protection, with sender authentication set up for your domains.
SharePoint governance
Site administration, access reviews and archive tidy-ups, using scripts that run as a dry run first and write an audit log.
Spreadsheet dependency mapping
A map of what feeds your models across a spreadsheet estate, including market-data add-ins.
Security alert triage
Alerts from your security tools investigated and explained, so you know what happened and whether it needs action.
Site-to-site connectivity
Encrypted site-to-site connections between your offices and hosted systems.
Frameworks we map to
We map our controls to Cyber Essentials Plus, the UK General Data Protection Regulation (UK GDPR) and NIST CSF 2.0, the Cybersecurity Framework of the US National Institute of Standards and Technology. We will show you the mapping on request.
We provide evidence to your FCA-facing compliance function; we do not act as your compliance officer.
How we protect client data is set out on our trust page.
Selected client work
Available on a call, under NDA.
Frequently asked questions
Will your changes break information barriers?
We design for them: admin rights granted per site, audit logs, and a dry run before any change.
Can you show what changed?
Yes. Our scripts log every change to a CSV (comma-separated values) file, and tickets record who approved it.
Do you handle Mimecast?
Yes. We manage Mimecast alongside Microsoft 365.
Tell us what isn't working
A 30-minute call, no slides. We ask about your estate, your auditor if you have one, and what you would like to stop worrying about.
Book a call