Organisational assessment
Reduce uncertainty about your information risk. Assess how the organisation operates, what it depends on and where weaknesses arise, giving leaders a clearer basis for decisions.
Independent information security consultancy
Understand where your organisation stands, what is driving its information risk and what needs to change. Independent assessment and advice that turn uncertainty into clear priorities.
Explore our expertiseHow we help
Recurring security problems often have deeper organisational causes. We assess the whole picture, connecting information security with enterprise architecture to identify changes that will last.
Reduce uncertainty about your information risk. Assess how the organisation operates, what it depends on and where weaknesses arise, giving leaders a clearer basis for decisions.
Bring security and architecture advice together. Examine the relationships between services, information, systems and responsibilities to address systemic issues at their source.
Help information security teams organise around what matters. Clarify roles, responsibilities and priorities so their effort addresses the organisation’s most significant risks.
Bring the findings together in a practical report: explain the risks and their underlying causes, set out security and architecture recommendations, and establish priorities for lasting improvement.
Experience with perspective
Wightman Brown Limited is an independent consultancy led by Tom Brown, bringing more than 25 years of experience in information security.
Our core work is assessing organisations and helping them remove uncertainty about information risk. Experience spans security architecture, systems engineering, national cyber risk assessments and assessments of essential services in UK Overseas Territories.
The result is usually a report combining information security and enterprise architecture advice. The aim is to help leaders address persistent, systemic issues, supported by a security team with a clear purpose and achievable priorities.
Based in Cheltenham, Gloucestershire. Supporting organisations in the UK and overseas.

Wightman Brown Limited is certified against Cyber Essentials.
Open source · Apache 2.0
CIRKS is Wightman Brown’s information risk knowledge system, connecting information assets with the business services, technology, people and suppliers they depend on.
Fully open source under the Apache License 2.0, CIRKS brings context to risk assessment and helps organisations understand where security decisions have the greatest business impact.
Explore CIRKS on GitHubStart a conversation
Discuss an organisational assessment, a clearer view of information risk or a new direction for your security team.
info@wightmanbrown.ltd.uk