Risk Crew

Risk Crew Solutions

Risk Management

Risk Crew provides expert risk management services to help you identify, minimise and manage the risks to your sensitive business information assets.

Security Testing

Risk Crew excels in conducting security penetration testing of business-critical infrastructure.

Governance, Risk & Compliance

Risk Crew are specialists in synchronizing activity across organisational governance, risk management and compliance functions.

Why We Are Different

Risk Crew approaches every project with a unique methodology.

We Think deeply, Question assumptions, Detect cause & effect and Deliver pragmatic measurable results.

This is our DNA along with a strong belief in knowledge transfer and customer satisfaction.

Which is why we back all our services with a 100% guarantee.

Nobody else does that.

LEARN MORE ABOUT RISK CREW

What Our Customers Say

“A great band of very smart people who help you make your cyber security work with your business operation.”

“These guys are real experts that make the subject simple to understand, helped us in bite sized chunks, and there to support throughout. Highly recommended”

“A very positive experience. Risk Crew staff were friendly and professional throughout the engagement, keeping me informed and addressing all concerns in a timely manner. I won't hesitate to recommend Risk Crew or use them for future engagements.”

“Great team! Fanatical about good service.”

“Have already recommended to another company.”

“Very helpful, knowledgeable and on the end of the phone when you need them. I highly recommend trying them out!”

“Compared to other Information Security consultancies; Risk Crew understand both (ALL) threats and governance from a top down perspective and plugging in the necessary resources to achieve the task."

“The team at Risk Crew have been a great support to us for our Cyber Essentials Plus certification."

"Over the past 6+ years their Cyber Security expertise has been invaluable and their helpful and flexible approach has harmonised with our requirements.”

Latest Blog Posts

What’s the difference between SOC 1 2 and 3?

What is a SOC? The difference between SOC 1, 2 and 3 is quite important assuming that you know what SOC is. Most people will have heard of a SOC audit report, but for those who do not understand what SOC stands for, let us start from the beginning. SOC[...]

Shut Down the 5 Deadliest Web Application Attack Vectors

Web applications are an essential component of any modern business. They can help convey the company vision, advertise services and deliver content to customers. Regardless of their use, they are a necessity to make oneself or a business known to the world. However, as beneficial as they can be, they[...]

FBI & CISA Warning – FortiOS Vulnerabilities are Actively Exploited

APT’s exploit Fortinet FortiOS vulnerabilities to compromise systems belonging to government and commercial entities, warn US agencies. Threat actors are scanning for three high severity vulnerabilities that have not been patched. CVE-2018-13379, CVE-2020-12812 and, CVE-2019-5591 are actively being exploited. Each of these vulnerabilities is public and the vendor issued patches,[...]

“Chained” PHP Git server compromised to add back doors to PHP source code

The official PHP Git repository suffered a software supply chain attack this week. Two malicious commits were pushed to the repository, where the attackers sign the commits with falsified but plausible aliases. An RCE backdoor was uploaded, which executes a backdoor in the HTTP protocol’s user agent header field. According[...]

Linux Kernel Found 3 Year Old Vulnerabilities that Allow Root Access

“Bad Things Come in Threes.” Three historical vulnerabilities have been discovered in the Linux kernel. If exploited, it could be used to gain root access to those systems. The original researchers from the security firm GRIMM have stated that these vulnerabilities remained undiscovered for 15 years. The vulnerabilities exist in[...]

Conducting DPIAs: The Key to Unlocking Data Protection Compliance Webinar

Why else should you attend the webinar? You’ll not only receive expert insight into triggers and mistakes to avoid but will have the opportunity to ask your pressing questions surrounding the DPIA tool – which is the key to DPA and GDPR compliance. What else will be covered on DPIAs?[...]

Information Security Risk Management Consultancy & Solutions