Independent information security consultancy

Understand the risk.
Make better decisions.

Understand where your organisation stands, what is driving its information risk and what needs to change. Independent assessment and advice that turn uncertainty into clear priorities.

Explore our expertise
Based in CheltenhamGovernment & commercial experienceCyber Essentials certified

How we help

Understand the organisation.
Address the causes.

Recurring security problems often have deeper organisational causes. We assess the whole picture, connecting information security with enterprise architecture to identify changes that will last.

01 /

Organisational assessment

Reduce uncertainty about your information risk. Assess how the organisation operates, what it depends on and where weaknesses arise, giving leaders a clearer basis for decisions.

02 /

Information security & enterprise architecture

Bring security and architecture advice together. Examine the relationships between services, information, systems and responsibilities to address systemic issues at their source.

03 /

Security team structure & priorities

Help information security teams organise around what matters. Clarify roles, responsibilities and priorities so their effort addresses the organisation’s most significant risks.

04 /

A clear report. A lasting direction.

Bring the findings together in a practical report: explain the risks and their underlying causes, set out security and architecture recommendations, and establish priorities for lasting improvement.

Experience with perspective

A whole-organisation
perspective.

Wightman Brown Limited is an independent consultancy led by Tom Brown, bringing more than 25 years of experience in information security.

Our core work is assessing organisations and helping them remove uncertainty about information risk. Experience spans security architecture, systems engineering, national cyber risk assessments and assessments of essential services in UK Overseas Territories.

The result is usually a report combining information security and enterprise architecture advice. The aim is to help leaders address persistent, systemic issues, supported by a security team with a clear purpose and achievable priorities.

Based in Cheltenham, Gloucestershire. Supporting organisations in the UK and overseas.

Cyber Essentials Certified

Wightman Brown Limited is certified against Cyber Essentials.

CIRKS — Cheltenham Information Risk Knowledge System

Open source · Apache 2.0

Risk has relationships.
Make them visible.

CIRKS is Wightman Brown’s information risk knowledge system, connecting information assets with the business services, technology, people and suppliers they depend on.

Fully open source under the Apache License 2.0, CIRKS brings context to risk assessment and helps organisations understand where security decisions have the greatest business impact.

Explore CIRKS on GitHub

Start a conversation

What does your organisation
need to move forward?

Discuss an organisational assessment, a clearer view of information risk or a new direction for your security team.

info@wightmanbrown.ltd.uk