Most organisations can describe what “good” cyber looks like. Far fewer can rely on it when under stress. More often, cyber initiatives are delivered as strategies, programmes, assessments, or tools, over time:
The result is cyber that looks mature but isn’t resilient.
We focus on the gap between cyber intent and operational reality where cyber resilience is either embedded or in many cases, quietly lost.
At Praxes Cyber, cyber resilience is not a toolset or a standalone programme.
Cyber resilience means: cyber capability that continues to operate when the organisation is under pressure, during disruption, growth, incidents, and change.
It is the outcome of cyber being:
What we focus on;
1. Cyber Transformation: designing and shaping cyber change so it delivers resilient capability, not temporary improvement.
2. Cyber Operationalisation: embedding cyber into everyday operations so controls survive beyond delivery and scale with the business.
3. Cyber Resilience and Confidence: building evidence-based confidence that cyber controls will perform consistently, and not just report well.
Who we work with;
If cyber needs to;
...then together we can make a difference.
I lead Praxes Cyber as an independent cyber transformation practitioner working with SMEs, corporates, and commercial organisations. I help leadership teams turn cyber intent into operational capability by embedding security into business as usual so it scales with growth, survives disruption, and earns confidence at board level. I support organisations to:
My perspective is shaped by more than 30 years in technology and over 20 years in cyber security, grounded in real operational and commercial experience. I have founded, built, and exited businesses, including an early cloud services company delivering IT as a Service to UK SMEs. Navigating growth, constrained resources, and real-world risk has given me a practical understanding of the challenges SMEs face when trying to balance security, cost, and scale.
Alongside Praxes Cyber, I am currently Head of Cyber Security Services for a niche, member owned organisation supporting Higher and Further Education institutions across the UK. I have also held senior security leadership roles within a global private bank and wealth manager. These roles have reinforced the importance of proportionate security, clear ownership, and controls that continue to function under regulatory scrutiny and operational pressure.
As an EC-Council Certified Chief Information Security Officer, I apply this experience to cyber transformation and operationalisation. My work goes beyond frameworks or tooling and focuses on leadership engagement, organisational clarity, and positioning cyber as a core business risk.
I work in environments where cyber must scale with growth, integrate with core operations, withstand disruption, and maintain stakeholder trust. My role is not to become the security function, but to help organisations build one that works and continues to work under pressure.
“Cyber resilience only exists if controls still work when the organisation is under pressure.”
Cyber resilience is not about how good your controls look when everything is calm.
It’s about whether they still work when the organisation is under pressure.
In many organisations, cyber exists as a set of frameworks, tools, and reports. On paper, it appears mature. In reality, it often struggles to survive change. growth, restructuring, cloud adoption, supplier failure, or an incident.
True cyber resilience is operational. It shows up in:
At Praxes Cyber, we focus on resilience as a capability, not a checkbox. Our work is centred on embedding cyber into the way the organisation actually operates, so it continues to function when plans are tested, assumptions break, and pressure is applied.
Because if cyber only works when conditions are perfect, it isn’t resilient at all.
Helping organisations deliver cyber transformation that produces resilient operational capability.
Support includes
Focus: resilient outcomes, not just programme completion
Embedding cyber into day-to-day operations so resilience is maintained after delivery.
Support includes
Focus: making cyber work over time
Helping organisations understand whether their maturity translates into operational resilience.
Support includes
Focus: confidence based on reality, not reporting
Providing independent challenge and expert judgement to leaders accountable for cyber resilience.
Support includes
Focus: clarity, resilience, and decision confidence
If you’re facing: