Risk Crew

Risk Crew Solutions

Risk Management

Risk Crew provides expert risk management services to help you identify, minimise and manage the risks to your sensitive business information assets.

Security Testing

Risk Crew excels in conducting security penetration testing of business-critical infrastructure.

Governance, Risk & Compliance

Risk Crew are specialists in synchronizing activity across organisational governance, risk management and compliance functions.

Why We Are Different

Risk Crew approaches every project with a unique methodology.

We Think deeply, Question assumptions, Detect cause & effect and Deliver pragmatic measurable results.

This is our DNA along with a strong belief in knowledge transfer and customer satisfaction.

Which is why we back all our services with a 100% guarantee.

Nobody else does that.

LEARN MORE ABOUT RISK CREW

What Our Customers Say

“Service was top notch – both personal and professional”

“As always, the team at Risk Crew were outstanding.”

"Excellent professional and helpful service. I’m glad we chose Risk Crew!”

“You simplified a complex issue. Thank you."

“The exercise was perfectly designed, and we got real value from it. We didn’t know what to expect and were very impressed.”

"Exceeded our expectations. Brilliant service!”.

“Too cool. Well done. Our Board were gobsmacked with the results.”

“Thank you very much for another year of professional and efficient services.”

“You’ve restored my faith in outsourcing! Thank you for a job well done”.

“Nick was outstanding as usual”

Latest Blog Posts

Netlogon Elevation of Privilege Vulnerability

The Zero logon flaw is not new but can still pose a risk to organisations that have not patched it yet. The name elevation of privilege vulnerability comes from a flaw in the login process, where the initialization vector is set to all zeroes when it should be a random[...]

A Flaw in the Windows TCP/IP Protocol Stack

A flaw in the Windows TCP/IP protocol stack implementation has been discovered, this is related to driver handling of IPv6 (IP version 6), whereby a threat actor can perform a Denial of Service (DoS) attack and may gain the ability to execute arbitrary code on the target. This works by[...]

“Playing Leapfrog” Default Password Usage Allows for Jfrog Artifactory Account Compromise

Jfrog Artifactory is a DevOps solution that aims to provide automation throughout an application delivery process and its goal is to improve productivity. It boasts many useful features for the deployment of applications and can be integrated with a client’s cloud infrastructure. However, a vulnerability exists where administrator accounts do[...]

T2 Security Chip in Mac a Computer Contains an “Unpatchable” Vulnerability

Security researchers have discovered a flaw, wherein two techniques are used to remove the restrictions apple puts in place (commonly known as Jailbreaking) are combined. Together, the Jailbreaking techniques exploit a vulnerability in Mac computers’ T2 Security Chip, which in turn allows an attacker to decrypt data and or plant[...]

Top 8 Metrics to Collect During Red Team Testing

Why should we collect metrics in a red team test? Metrics are a valuable way of measuring changes and improvements over time. A red team test is conducted to assess the controls and lack of controls in place to stop an attacker achieving certain goals. By using metrics during red[...]

“Shark on the Router” (Authentication Bypass in Wireless Router Chipsets)

Multiple wireless router chipsets were discovered to be vulnerable to authentication bypass, giving a threat actor control of network traffic passing through the affected device(s). A successful attack occurs when an attacker injects arbitrary (unencrypted) packets into networks with WPA2 protection. Upon injection, the packets are considered to be legitimately[...]

Information Security Risk Management Consultancy & Solutions