Penetration testing
How to prepare for penetration testing: questions to ask before commissioning a test
4 min readRead article
Information security · Compliance · Practical AI
Stronger security.Clear next steps.
Understand your risks, meet requirements and give your team the skills to act.
Compliance, Virtual CISO, information security and AI training, and penetration testing — shaped around your business.
Start with a conversation. We agree the scope before work begins.
Advice grounded in practice
- CISA
- CEH
- Regulated financial-sector experience
What we can do for you
The right expertise for your next step.
Choose a focused engagement or ongoing support. We tailor the scope to your priorities.
From requirements to action
Compliance & standards
DORA, NIS2, the EU AI Act and ISO 27001. Assess gaps, establish priorities and implement the agreed governance and controls.
Typical result
Explore this service A gap assessment and prioritised action plan.
Consistent security leadership
Virtual CISO
Information security leadership on an agreed basis: risk oversight, security priorities, management advice and monitoring of implementation progress.
Typical result
Explore this service Clear priorities, ownership and management reporting.
Knowledge for everyday decisions
Information security training
Training for executives, employees and specialists. Practical scenarios, content tailored to your organisation’s risks and clear actions.
Typical result
Explore this service Practical scenarios and guidance for everyday work.
Validate technical weaknesses
Penetration testing
Security testing within an agreed scope. Receive validated findings, an explanation of their impact and remediation recommendations, with retesting agreed separately.
Typical result
Explore this service Validated findings and remediation recommendations.
Practical skills for your team
AI training
AI for everyday work: effective prompts, practical exercises, output verification and safe data handling. A programme tailored to your team’s needs.
Typical result
Explore this service Hands-on exercises, prompt examples and safe-use guidance.
Deliverables are confirmed in the agreed scope of work.
Working with Glesum
A clear process. A useful result.
From a focused assessment to ongoing support, you know what we are working towards and what you will receive.
Our approachAgree what matters
We clarify your situation, priorities and the outcome you need.
Set a practical scope
We agree deliverables, responsibilities and timing before work starts.
Turn findings into action
We explain the results, prioritise next steps and support the work we have agreed.
Compliance in practice
Regulations and standards we work with.
Fictional demonstration · PDF
DORA assessment sample
See what a DORA gap assessment can look like: a management summary, evidence-based findings and an action plan. Demonstration using fictional data.
Practical insights
Useful before you decide.
Information security management
When does an organisation need an Information Security Manager or Virtual CISO?
7 min readRead article
Your next step
What would you like to move forward?
Tell us about your challenge. Together, we can identify the right service and a practical starting point.