Risk Crew

Registration Now Open For The

Capture the Flag Competition 2020

Risk Crew Solutions

Risk Management

Risk Crew provides expert risk management services to help you identify, minimise and manage the risks to your sensitive business information assets.

Security Testing

Risk Crew excels in conducting security penetration testing of business-critical infrastructure.

Governance, Risk & Compliance

Risk Crew are specialists in synchronizing activity across organisational governance, risk management and compliance functions.

Why We Are Different

Risk Crew approaches every project with a unique methodology.

We Think deeply, Question assumptions, Detect cause & effect and Deliver pragmatic measurable results.

This is our DNA along with a strong belief in knowledge transfer and customer satisfaction.

Which is why we back all our services with a 100% guarantee.

Nobody else does that.

LEARN MORE ABOUT RISK CREW

What Our Customers Say

“Thank you very much for another year of professional and efficient services.”

“Too cool. Well done. Our Board were gobsmacked with the results.”

“The exercise was perfectly designed, and we got real value from it. We didn’t know what to expect and were very impressed.”

“As always, the team at Risk Crew were outstanding.”

“You simplified a complex issue. Thank you."

“You’ve restored my faith in outsourcing! Thank you for a job well done”.

"Exceeded our expectations. Brilliant service!”.

"Excellent professional and helpful service. I’m glad we chose Risk Crew!”

“Nick was outstanding as usual”

“Service was top notch – both personal and professional”

Latest Blog Posts

BLE Vulnerability Leads to Broken Authentication and Malicious Data Transfer

The what: A successful Bluetooth Low Energy Spoofing Attack (BLESA) allows threat actors to connect with a device (by getting around reconnection authentication requirements) and send spoofed data to the device. This first starts with malicious packets fooling the device into behaving abnormally and attackers manipulating the device to feed it[...]

What to Include in Your Security Testing Supplier’s Agreement

A successful penetration test requires good preparation with an airtight service-level contract between the customer and a supplier that helps both to achieve the ultimate goal: security. Listed in this post are some important items to include in the contract. These are by no means a full and comprehensive list[...]

Cyber Security After COVID-19: How to Protect Your Business

What is cyber security after COVID-19? We have now passed the stage of emergency policies and procedures being implemented, new technology being procured outside a normal tender and we have determined our businesses tasks that cannot be performed remotely since they require strict supervision. There were a few hiccups, lessons[...]

Top Security Breaches that have Zoomed into 2020 Thus Far

We have all seen how fast things can change in 2020 but the one thing that has not changed is the number of security breaches. In fact, the coronavirus increased the security threat landscape. One reason for this increase is due to the working from home (WFH) environment created more[...]

3 Degrees of Security Testing Webinar Series

Don’t miss the next webinars in the 3 Degrees of Security Testing Series: Attend and Win Attend one of our upcoming webinars and get invaluable insight on how to enhance and improve your security testing. That’s a big win right there and reason enough to join us. But hold on,[...]

File Manager Plugin in WordPress Contains a Remote Code Execution Vulnerability

WordPress’ popular plugin File Manager (versions 6.0-6.8) contains a vulnerability that allows an attacker to upload files and execute commands. Indicators of compromise include filenames such as “hardfork.php”, “hardfind.php” and “x.php”. The root of this problem is connector.minimal.php, which is due to a recent name change and executes directly —[...]

Information Security Risk Management Consultancy & Solutions