Risk Management & Security Testing From Risk Crew

Browse our wide range of security services below

Risk Management

Expert risk management services to help you identify, minimise and manage the risks to your sensitive business information assets. Our risk management services include Ransomware Readiness Audits, Risk Assessments, Secure Code Reviews, and more.

Security Testing

A comprehensive service that includes a detailed report, courtesy workshop, retesting and on-call assistance. Our security testing services include Red Team Testing, Social Engineering Testing, Cloud Security Testing, and more.

GRC Services

Customised consulting to help you synchronise activities across organisational governance, risk management & compliance. Our compliance services include ISO 27001 Compliance, Cyber Essentials, SOC 2 Compliance, and more.

eRiskology™

eRiskology™ is a complete information security training & awareness programme solution that instils a secure culture in your business. The eRiskology™ training programme combines four learning pathways: Inspire, Empower, Engage, and Measure.

Why Choose Risk Crew for Your Risk Management?

Risk Crew approaches every project with a unique methodology.

We Think deeply, Question assumptions, Detect cause & effect and Deliver pragmatic measurable results.

This is our DNA along with a strong belief in knowledge transfer
and customer satisfaction.

Which is why we back all our services with a 100% customer satisfaction guarantee.

Nobody else does that.

LEARN MORE ABOUT RISK CREW

What Our Customers Say

Don’t just take our word for it, see what our customers think.

Latest Blog Posts

Keep up to date with all things security testing by reading our latest blog posts.

Lockbit Ransomware
APACHE STRUTS 2 Critical Vulnerability – CVE: 2023-50164

Risk Rating: CRITICAL CVSS Score: 9.8 Vulnerability Type: Remote Code Execution (RCE) CVE Identifier: CVE-2023-50164 Exploitation Status: Actively exploited. Affected Version: Struts 2.0.0-2.3.37(EOL), 6.0.0-6.3.0.1, 2.0.0-2.5.32. Link: Apache.org Introduction  Recently discovered, CVE-2023-50164 reveals a critical flaw in Apache Struts that could allow hackers to execute code remotely by manipulating file upload settings.[...]

Clear Desk and Screen Policy
How to Implement a Clear Desk & Clear Screen Policy for Your Organisation

You know that feeling when you walk into an office, and it looks like a hurricane just blew through? Papers litter the area, sticky notes cling to computer monitors like colourful barnacles, and chaos fills the air. The implications of these might seem obvious but they pose greater problems —[...]

ISO 27001 Clauses 4-10: A Complete Guide

ISO/IEC 27001  is an international standard for creating an information security management system (ISMS). It provides a systematic approach for organisations to manage and protect their sensitive information. This standard is broken down into Clauses and Security Controls (Annex A) which every organisation that intends to be ISO 27001 compliant[...]

What is Open-Source Intelligence? How to Get Started

Imagine a world intricately woven with connections, where information flows like a meandering river of possibilities. This is the world we currently live in. In the past, intelligence primarily revolved around strategic knowledge, used by decision-makers to gain advantages, often centred on foreign capabilities, global events, and local concerns, particularly[...]

NIS 2 Timeline
NIS 2 Timeline & Requirements to Minimise Risks

NIS 2 Preparedness It’s getting Risky out there… The protection of our networks and systems is of utmost importance, now more than ever. Attackers are increasingly sophisticated and attack with increasing frequency and ferocity. Only a Superhero (in the guise of an EU directive) can help us. Is it a[...]

ISO 27001 Audit
How to Prepare for an ISO 27001 Audit

In the world of information security, there are many frameworks and countless guidelines. But among them all, one standard rules them all. Originating from the Plateau of Gorgoroth in Northwestern Mordor, it towers high above the rest, peering deep into the very hearts of organisations like the Eye of Sauron;[...]