Lead · Service

Strategy & Planning

A senior sounding board, whenever you need one.

Working sessions with our principals for anything you need to think through: next year's plan, a budget, a vendor decision, a board question, an idea you want to pressure-test. All of our knowledge and experience, brought to your problem and weighed in your risk language.

Format
Working sessions, scheduled or ad hoc
Scope
Anything you need to think through
Who you get
Our principals, not a bench
You leave with
A decision, a plan or a clear next step

What makes it different

Experience you can borrow.

Most organizations don't need another assessment to make a decision. They need someone who has made it before, in the room, for an hour.

Open scope

Bring anything.

Annual plans, budgets, tool choices, hiring, a board question, an incident you're still thinking about. If it touches security or risk, it's in scope.

Senior only

Principals in the room.

Decades across security operations, enterprise leadership and the boardroom, applied to your situation.

Decision-ready

Weighed in your risk language.

Options scored the way the rest of your program scores them, so the plan holds up in front of leadership and the board.

The problem

Good ideas stall without a sounding board.

Security leaders carry a lot of decisions alone, and most consulting engagements are too big and too slow to help with one of them.

  • No peer to think withDecisions made alone, under time pressure.
  • Engagements too heavyA full project to answer a single question.
  • Plans built from vendor pitchesPriorities set by whoever called last.
  • Annual plans written in a hurryNext year's budget decided in a week.
  • Ideas never pressure-testedThe first flaw shows up in front of the board.

How it works

Bring the question. We bring the experience.

Light on process by design. A session can be a single hour or a planning day, on a schedule or when something comes up.

  1. 01

    Tell us what's on your mind

    A plan, a decision, an idea, a problem. A few lines is enough.

    • 02

      We prepare

      We read what you send, draw on our methodology and past work, and come with questions and options.

      • 03

        Working session

        Your team and our principals, working the problem together. Whiteboard, not slide deck.

        • 04

          Write-up

          A short summary of what was decided, the options considered and the next steps, in business terms.

          • 05

            Follow through

            We stay available as the plan meets reality, and the work can roll into any other service.

            Who it's for

            Useful to everyone who has to decide.

            For business leaders

            A second opinion you can trust.

            • Plain answersWhat we would do, and why.
            • Risk-weighedOptions in revenue, operations and exposure terms.
            • FastHours, not a project.

            For security and it leaders

            A peer who has been there.

            • Pressure-testFind the flaw before leadership does.
            • Planning helpNext year's plan with experience behind it.
            • CredibilityRecommendations that carry weight upstairs.

            What you get

            Strategy & Planning deliverables.

            Concrete artifacts you keep, not a slide deck that disappears after the readout.

            1. 01

              Working sessions

              Scheduled planning days or ad hoc calls.

            2. 02

              Session summaries

              Decisions, options and next steps, written down.

            3. 03

              Annual or cycle plan

              Priorities, sequencing and budget guidance when planning is the goal.

            4. 04

              Option analysis

              Trade-offs weighed in your risk language.

            5. 05

              Open access

              A principal to call when something comes up.

            6. 06

              A path into other services

              When a question becomes a project, we are already briefed.

            Runs on one risk language

            Scored with your methodology.

            Every finding is scored the same way as the rest of your program. Already have a methodology? We use it. If not, we build it with you first, in a single workshop.

            How we build a risk methodology →
            “Sometimes the most valuable hour is the one spent thinking it through with someone who has done it before.”CyberRisk One

            Bring us what you're working through.

            A plan for next year, a decision you keep circling, an idea you want to test. Tell us what's on the table and we'll set up a session.

            No obligation. We reply within one business day.

            Cybersecurity, decided. © 2026 CyberRisk One