We Offer a Wide
Variety of Security Services

Risk Assessment

Stanway Hope is widely experienced in the performance and delivery of Risk Assessment and Risk Management activities and products. Our team has contributed to the development of strategies, policies and methodologies used within the UK Public Sector.

We believe in working with you to help you achieve your security and risk management objectives. Our team is experienced in delivering these activities in line with standard methodologies such as ISO27005 or working within client or sector specific approaches, or the tailoring of a bespoke solution to fully meet your needs.

Cyber Security Architecture

Our Security Architects are well versed in today's blended architectures and are comfortable working across Public Cloud, On Premise or Hybrid architecture solutions. We help our clients by designing, developing and deploying the appropriate security architecture to reduce risks and manage threats, whilst ensuring the protection of sensitive data, Intellectual Property and critical time sensitive business operations.

Security Requirements Development

We have many years of experience in working with clients in the development of appropriate measurable security requirements that support a client's objectives.

Our specialists can assist in the development and capture of security requirements to meet the needs of projects or ongoing service delivery. Our team has also contributed to the development of security requirements used in and supporting UK legislation, enabling us to provide our clients with detailed understanding of relevant applicable mandatory security and compliance requirements.

Risk Treatment

Stanway Hope understands that Risk Assessments or other security assessment findings are only part of a solution. We support clients in developing and implementing risk treatment plans and solutions to address identified risks and improve their security posture.

Audit and Assurance Compliance Services

Stanway Hope offer a tailored range of Audit, Accreditation and Assurance Assessment Services. Our teams include NCSC Certified Cyber Security Professionals, BSI certified ISO 27001 auditors and technical assurance specialists with a range of professional accreditations. We have decades of experience successfully delivering services across the UK Defence, National Security, National Policing, Telecommunications, Education, Retail and Charity Sectors.

• International security standards such as ISO27001, NIST CSF, SOC 2 and PCI DSS
• Government standards such as NCSC CSF, HMG IS1 and IAMM
• National and regional industry regulations including NPSA National Protective Security Authority
• Bespoke offerings agreed with clients based on their own requirements or standards.

Security Testing and Test Management

Stanway Hope understands the importance of testing as an assurance mechanism for controls. Testing enables clients and related stakeholders to clearly understand the assurance that controls are providing in the effective management of risk.

Our specialists have significant experience in the development of appropriate testing activities and programmes to aid clients in understanding the control assurance. In addition to development and planning, our team can undertake security testing and provide test management services where alternative testing approaches have been chosen.

Physical Security

In addition to the assessment and audit of physical security controls, Stanway Hope works with clients where new environments are needed. This can range from individual containers to Sensitive Compartmented Information Facility (SCIF).

• Develop appropriate specifications to meet operational requirements
• Undertake reviews of proposed designs
• Build Overview & Review
• Security Control Commissioning

Where clients require, we are able to develop Security Operating Procedures (SyOps) and procedures to support effective operation of the physical security environment.

Training and Development

Stanway Hope offer training and development programmes to meet individual client needs.

• Information Risk Management Training
• Security Specialist Development Programmes
• Security Awareness Briefing Programmes
• Operational Security Briefings