Matthew Carr
Matthew Carr presenting industrial security research to a conference audience

CISO-as-a-Service

Your CISO, without the full-time hire.

I help growing and operationally critical organisations understand cyber risk, strengthen resilience and give boards confidence that security is being properly led.

£4,950per month. £5,000 onboarding assessment, waived at twelve months.

Disclosing industrial control research, DefCon

Research covered byBBC NewsThe TelegraphThe RegisterBarron'sChannel FuturesDatamationLifewire

I give growing and operationally critical businesses the cybersecurity leadership of a CISO — without the cost and commitment of a full-time executive hire.

Growing businesses

You have outgrown ad-hoc security. Customers are asking questions you cannot answer quickly and the board has started asking as well. What you need first is somebody senior to own it, before you need more tools.

Operationally critical organisations

A security failure has a physical consequence: a stopped process, a damaged asset, an unsafe condition. Standard security advice does not fit, and most advisers have never set foot in a plant.

OT and ICS

You work with me.

I'm Matthew Carr, a CISSP-certified cybersecurity leader specialising in operational technology, critical infrastructure and offensive security. I work directly with executives and boards to turn technical security problems into clear business decisions.

You work directly with me, supported by Atumcell’s specialists when delivery requires them. The person sitting in your board meeting is the person who did the thinking. When a piece of work needs hands, an assessment or a technical test, they pick it up behind me and I stay accountable for the result.

The background, the disclosures and the talks

What you get every month.

Direct access to your named CISO

I appear on your org chart, and I take the call.

Cyber-risk strategy and roadmap

Twelve months, sequenced, with costs against each item.

Risk-register ownership

I keep it myself, so it is current when someone asks.

Monthly executive reporting

An hour with your leadership team, every month.

Quarterly board briefings

Four written briefings a year, in the board's language.

Supplier and technology oversight

Review of what your operation depends on.

Incident preparedness

A plan with named roles, walked through before you need it.

Guidance through scrutiny

Audits, customer reviews and insurance renewals.

The full scope, the cadence and the fees

Find out what a named CISO would change.

Thirty minutes, confidential, directly with me. We look at what you are being asked for, what you already have, and whether this is the right shape for you.

£4,950 per month. £5,000 onboarding assessment, waived on a twelve-month commitment.