Krishna Radhakeesoon
Partner - IT Governance & Consulting
Most organisations have already outsourced a material part of their attack surface — to vendors, to cloud, and to their own people. This pillar governs the risk you do not directly control: third parties, human behaviour, and the internal capability you need to sustain.
Signature offerings
What we deliver under this pillar
Third-Party Risk Management Programme
Identify and manage third-party cyber risks before they impact your business through structured TPRM, vendor due diligence, and continuous supply chain monitoring.
Cybersecurity Awareness Programme
Deliver tailored cybersecurity training from boardroom to frontline to reduce human risk and build a strong security culture.
Live Hacking Demonstrations
Bring cyber threats to life through real-world attack demonstrations to raise awareness and drive better security behaviours.
Social Engineering Simulations
Phishing, vishing, quishing, and physical security testing to measure human risk and identify gaps in awareness and resilience.
Cybersecurity Academy & Certification Training
Accredited cybersecurity training and certification programmes (ISO, CEH) in partnership with PECB and EC-Council to build internal expertise.
Outcome: A security-aware culture, managed vendor risk, and sustained internal capability.
Typically engaged when
Where this pillar earns its place
Engagements under this pillar are scoped to your regulatory context, sector and risk appetite — and are delivered by the same senior team from scoping through to board presentation.
- Outsourced or heavily cloud-dependent operating models
- Regulated firms required to evidence vendor due diligence
- Groups with high staff turnover or frontline customer contact
- Building an internal cyber bench through accredited training