top of page

Next Steps With AE

We're looking forward to working with you and your organisation. To facilitate our discussions, and ensure we're all on the same page, there's some information we'll need. This information will help us scope the activity clearly and accurately, ensuring our proposal is in line with your expectations. Click on the service you're interested in below to find out more.

IRAP & Embedded Assessment

Assessing your capability through IRAP or DCIAB-endorsed embedded assessor can be a mindfield to navigate. To get started, we'll ask some scoping questions to identify the system boundary, classification, architecture and existing governance. 

​

These details are key to building accurate quotes as they ensure we assign the best suited assessors, accurately scope the level of effort required and ensure that the service you receive meets your expectations. For each assessment, we'll ask;

​​

  • Whether you and the organisation are familiar with IRAP and assessment?

  • What the purpose of the IRAP / Assessment is?

  • Whether the system has been previously assessed?

  • Whether you have a System Security Plan (SSP) and SSP-A (the annex detailing ISM control applicability)?

  • Access to some security documents, such as architecture and design documents.

Pen Testing and Vulnerability Assessment

Pen Tests and VAs can be as simple or as complex as you need them to be. We often find that clients have either very clear or very broad requirements for their testing - that's why we find it is best to thoroughly understand your needs before providing a quote or proposal. 

​

With all of our pen testing and VAs, we always meet with our clients first. This meeting helps to establish the scope and objectives of our engagement. Coming into this meeting, we want you to be prepared for the questions we'll be asking. These details are key to building accurate quotes and ensure that the service you receive meets your expectations. For each project, we'll ask;

​​​

  • What is the aim of the test?

  • What are the requirements (board / compliance / internal / contractual)?

  • What systems do you have? (on-prem and cloud)

  • What are your 'crown jewels'? (the most valuable and critical assets to the company). 

  • What are your greatest concerns? (data loss, insider threats, external threats, etc)

  • When do you need the testing completed by? 

  • How and when can we access your systems? 

  • What is your budget?

Consultancy & Advisory Services

Alpha Echo provide expert Cyber GRC, Project Management, Education, and Intel advisory services. We do this through embedding personnel in your organisation, working on behalf of the organisation to deliver cybersecurity uplift. 

​​

With all of our embedded advisory services, we always meet with our clients first. This meeting helps to establish your workforce requirements, including the number of resources, the levels and their specialisations. Coming into this meeting, we want you to be prepared for the questions we'll be asking. These details are key to ensuring we assign the best fit for your organisations needs. For each project, we'll ask;

​​​​

  • What are the role requirements?

  • What specific skills or qualifications are required?

  • When do they need to start?

Tabletop Exercises and Simulations

Alpha Echo deliver high class table top exercises (TTXs) and simulation activities. We do this through combining expert personnel with backgrounds in education, technical cybersecurity testing & implementation, cyber risk, psychology, and cyber intel. 

​​​

When developing a TTX or adversary simulation, we always meet with our clients first. This meeting helps to establish the objectives and outcomes of the activity. Coming into this meeting, we want you to be prepared for the questions we'll be asking. These details are key to ensuring we assign the best fit for your organisations needs. For each activity, we'll ask;

​​​​​

  • What are the activity requirements? (i.e., compliance / board requirement / board engagement / training & awareness)

  • What is the objective of the activity?

  • What are the key focus areas or themes for the activity?

  • Have you had previous activities or incidents?

  • Do you have an incident response plan or business continuity plan?

  • Who are the audience for the activity?

  • Is this theoretical or technical?

Cyber Education

Alpha Echo delivers a range of cyber education services, including cyber awareness sessions, exercises, cyber intel briefs, bespoke cyber uplift presentations, cyber workforce analysis, and learning program development. We provide cyber educators, cyber intel analysts, workforce consultants and psychology specialists to meet your cyber education needs. Many of these services are delivered through our dedicated cyber training capability - Cyber L33T.

​​​

With all of our education services, we always meet with our clients first. This meeting helps to establish your education requirements, the training required, learning objectives and delivery modes. Coming into this meeting, we want you to be prepared for the questions we'll be asking. These details are key to ensuring we assign the best fit for your organisations needs. For each project, we'll ask;

​​​​

  • What are the training requirements?

  • Who is the audience?

  • How many people require training? And how many sessions are required?

  • What are the learning objectives?

  • What behaviours are you trying to change?

  • What are the greatest risks to your organisation?

bottom of page