Skip to content
CYBER

Security guidance shaped by how systems and operations actually work.

Security advice is useful only when it reflects the organisation expected to operate it. AURMAK combines cyber and information security advisory work with an understanding of engineering, connected environments and business delivery. The result is practical direction, clear evidence and controls that can be maintained.

What makes the approach different.

  1. Security and engineering knowledge within one business

    Our work considers how systems are designed, connected, changed and supported, not only how a control appears in a framework.

    What this means in practice

    You can expect architecture, operating constraints and ownership to appear in the scope and findings.

  2. Digital, physical and operational context

    We work across cloud, applications, information, connected buildings and operational environments where availability and safety can change the right security decision.

    What this means in practice

    OT and smart building work includes the operating environment and the people who run it, not only a document review.

  3. Independent recommendations

    We do not base advice on resale margin or commission. The recommended control is the one the organisation can operate and evidence.

    What this means in practice

    Roadmaps show the purpose, owner, effort and assurance need for each priority action.

  4. Business decisions from technical findings

    A finding should explain what could happen, what it would mean for the organisation and which decision is required.

    What this means in practice

    Leadership reporting and technical detail are separated so both audiences receive usable information.

  5. Senior involvement in the work

    The people who shape the scope remain involved in assessment, judgement and client discussion.

    What this means in practice

    Named responsibility is visible in the engagement scope, meetings and final outputs.

  6. Support from assessment through assurance

    AURMAK can stop at a clear plan or continue through design, improvement and verification, depending on what the client needs.

    What this means in practice

    Each stage has a defined output, so longer support remains accountable and can be reviewed.

Clear service boundaries.

Saying where the work stops is more useful than another adjective.

  • We provide advisory, design, readiness, improvement and assurance services. Continuous monitoring is not implied unless it is explicitly contracted through a suitable service arrangement.
  • We support certification readiness but do not act as the independent certification body.
  • Where specialist accreditation or independence is required for testing, the work is coordinated through appropriately qualified partners.