About Us
Broad Peak helps you to plan and execute a cyber security strategy that meets the objectives of your business and any compliance or regulatory requirements.
The why is focussed around ISO27001. If you have ISO27001 then meeting the standard is essential, if you’re aspiring to ISO27001 or you want to focus your cyber resources and investment around the most widely regarded standard then getting into the best practice now makes a lot of sense.
Our experts help you to de-mystify ISO27001 and implement simple policies and procedures that don’t suck up resources and time unnecessarily – our goal is to help you continuously plan, execute and improve your cyber strategy to keep your organisation secure. So whether you need to be accredited or not, our work will always support the requirements of the most demanding industry standards.
The international standard ISO/IEC 27001:2013 (ISO 27001) provides the specifications for a best-practice ISMS (information security management system) – a risk-based approach to information security risk management that addresses people, processes and technology.
It is essential that organisations “retain documented information about the information security risk assessment process” so that they can demonstrate that they comply with these requirements.
They will also need to follow several steps – and create relevant documentation – as part of the information security risk treatment process.
Clause 6.1.2 of the Standard sets out the requirements of the information security risk assessment process.
Organisations must:
Establish and maintain specific information security risk criteria;
Ensure that repeated risk assessments “produce consistent, valid and comparable results”;
Identify “risks associated with the loss of confidentiality, integrity and availability for information within the scope of the information security management system” and identify the owners of those risks; and
Analyse and evaluate information security risks, according to the criteria established earlier.
Our four stage strategy with clients allows us to simplify cyber planning and execution, using our decades of experience to maximise return on investment for your time and resources. Starting with a plan, prioritising projects, implementing and managing technology, continuous monitoring and penetration testing are the key areas, with our support to make the best decisions and respond to any challenges quickly.
Assess
We use our Assess Platform, a cyber risk treatment plan tool to help customers understand, prioritize and plan for the most efficient use of their time and budget, thinking long term about the organisation's cyber needs. Assess Platform is unique IP to Broad Peak and is built on decades of cyber expertise.
Secure
led by the Assess consulting we propose technologies that meet the needs of the organization and provide a rapid TTV (time to value). Technology investments are always part of a longer term plan that prioritises where IT investment will have the most impact.
Monitor
continuous monitoring of the network and devices ensures your IT team and our support team are able to respond and remediate much quicker to any anomalies or attacks. Automation is a powerful tool to ensure your IT are focussed on priorities rather than sifting through logs.
Test
Ensuring that we regularly test the effectiveness of a customer's cyber posture continues the loop back to Assess by learning from every penetration test and all monitoring data – the goal is ensuring we're deploying data to justify any time and investment made in cyber security.
At Broad Peak, we firmly believe that our people are the beating heart of our success. With decades of expertise in cybersecurity, our team stands as a testament to our commitment to customer, which is how we recognise amazing performance and performers. Rigorous training programs ensure our professionals stay at the forefront of industry advancements, allowing us to deliver the latest technologies.
Yet, it’s not just about expertise; it’s about fostering a customer-centric culture. We understand that our success depends on the success of our clients. Through unwavering dedication to customer experience, we ensure that partnering with us means not just advanced cybersecurity but a truly exceptional journey.
Our People.
Our Company.
Our Approach.
At Broad Peak our commitment to cutting-edge cybersecurity solutions is reflected in our strategic partnerships. We engage with industry-leading vendors at the forefront of technology, investing time in extensive due dilligence to curate a portfolio that stays ahead in our fast-paced environment.
By aligning with the best in the field, we ensure that our customers benefit from the most relevant and advanced cybersecurity technologies available.
It’s not just about keeping pace; it’s about leading the charge in securing our clients against evolving threats, making informed choices, and staying resilient in the dynamic landscape of cybersecurity.
Talk to a security expert.
To discuss any cyber security needs with one of our security experts, please get in touch.