Consulting
Scoped advisory work on security operations and ISO/IEC 27001:2022 information security management.
SOC & SIEM Advisory
Log-source coverage, onboarding, normalization, data quality, and visibility review.
- For whom
- Security teams and organizations
- Example output
- Current-state map, gap list, and priorities
Detection Engineering
ATT&CK-informed scenarios, SPL/Sigma examples, and tuning approach.
- For whom
- SOC and detection teams
- Example output
- Scenario document, draft rule, and test plan
Incident Response Readiness
Playbooks, evidence collection approach, and tabletop scenario design.
- For whom
- Teams preparing for response
- Example output
- Draft process and exercise plan
Threat Intelligence & Visibility
IOC lifecycle, CTI integration, and data-source review.
- For whom
- CTI and operations teams
- Example output
- Source and integration assessment
ISO/IEC 27001:2022 ISMS advisory
Scope, information assets and risk assessment, control evidence, statement of applicability, and internal-audit readiness. The 2024 amendment is considered where relevant; certification is not guaranteed.
- For whom
- Organizations building or improving an ISMS
- Example output
- Current-state and gap map, prioritized action plan
Process
An initial conversation defines the goal and data boundaries; scope and deliverables are agreed in writing. Confidentiality and existing employment obligations are respected. Outcomes are not guaranteed.
Have a project in mind?
Reach me on LinkedIn to discuss scope and expectations. This site does not have an automated booking or application form.