Talk to a CISO

Sometimes you don't need an ongoing relationship. You need experienced people to look at your situation and tell you the truth about it. A senior consultant leads the work and brings in the specialist it needs.

CISSP · 10+ years in security · ISO 27001 · SOC 2 · GDPR · DORA · PCI DSS

What we do most often

Security posture assessment

A plain-language review of where you actually stand: what's a real risk, what's a checkbox, and what's blocking deals. You get a prioritised list, not a 90-page report to file away.

Compliance readiness

Gap analysis, policies, and evidence collection for ISO 27001, SOC 2, GDPR and DORA, including the security requirements now appearing around AI systems. Built to fit around your team.

Customer security questionnaires

The 200-question spreadsheet that arrived with your biggest deal. We answer it, we tell you which answers are weak, and we fix the ones that would fail a follow-up.

Incident response planning

A plan written before you need it: who does what, who gets told, and in what order. So a bad day stays a bad day instead of becoming a bad quarter.

Most engagements start with a 30-minute call and a fixed-scope assessment.

Let's talk

Tell us what's driving it: a deal, an audit, or a deadline. Thirty minutes, no pitch. If Omalu isn't the right fit, we'll tell you that too.

We reply to every enquiry within one business day.

Need someone on an ongoing basis? See CISO as a Service →