Information Governance
& Cyber Readiness
A structured, field-tested approach to information classification and cyber governance — from initial assessment to board-level oversight. Built for SMEs and mid-market companies that protect what matters.
The problem we solve
Most organisations know they should classify their information. Few actually do it. The result: confidential data shared over WhatsApp, trade secrets stored on personal laptops, and board members who couldn’t tell you what “business critical” means in their own context.
This isn’t an IT problem. It’s a governance problem — and it starts at the top.
The C1–C4 Classification Framework
A four-level system developed through years of embedded work with organisations across the UK, Italy, and South Africa. Practical, sector-adaptable, and designed to change behaviour — not just produce documents.
Three ways to work with us
Each tier builds on the previous one. Most organisations start with an assessment, discover gaps they didn’t know existed, and ask for the training. The smartest ones stay for the ongoing governance.
Information Governance Readiness Assessment
A half-day embedded assessment where we map your organisation’s current information handling against the C1–C4 framework. We identify gaps, classify your critical information assets, and deliver a readiness report with prioritised actions — calibrated to your roles and organisational structure.
£1,500 – 2,500
Training & Certification Programme
A structured 10-module course covering all four classification levels, handling requirements, incident response, and regulatory compliance (including GDPR and sector-specific frameworks). Delivered in-person or hybrid, with real scenarios drawn from your industry. Concludes with a certification exam at three levels: Basic, Advanced, and Trainer.
£3,000 – 5,000 per organisation
Continuous Audit & Cyber Governance
Quarterly embedded audit visits to verify adoption, update classifications, and connect information governance to broader business resilience. Built on the UK Cyber Governance Code of Practice, this tier bridges the gap between information security and board-level oversight — using an impact-driven approach that starts with your business model, not a compliance checklist.
This is where information governance becomes a strategic conversation. If your organisation saves lives, builds critical infrastructure, or holds sensitive client data, the board needs to understand what breaks if systems fail.
£6,000 – 12,000 / year retainer
Licensed Partner Programme
We’re building a network of certified professionals who deliver Tier 1 and Tier 2 engagements using our frameworks, under licence. If you’re a consultant, project manager, or trainer with field experience, this could be for you.
The path to becoming a Licensed Partner
You bring the client relationships and delivery capability. We provide the frameworks, certification authority, branded materials, and ongoing quality assurance.
Start with a conversation
Whether you’re an organisation that needs to get serious about information governance, or a professional who wants to deliver these services under licence — let’s talk.
