About Glesum
Information security and compliance for your business.
Glesum helps businesses strengthen information security through four core services: regulatory and international standards compliance, Virtual CISO, information security training and penetration testing.
We adapt the work to your activities, resources and existing processes. We can assess requirements and gaps, support ongoing security management, develop practical training or plan and deliver system testing within an agreed scope.
How we work
Agree the objective and scope. We discuss the business services that matter, who needs to be involved, timing and expected outputs.
Deliver the agreed work. Depending on the service, we assess documentation and controls, support risk management, deliver training or test systems.
Discuss the results and next steps. We explain their business relevance, propose priorities and agree how implementation can be verified.
What you receive
Depending on the service, outputs include an assessment or testing report, a risk and action register, draft documents, training materials or a management progress summary. We discuss the results with the people who will make decisions and implement them.
Working together and handling information
Before exchanging sensitive information, we agree how it will be shared and used. We bring in technical specialists for penetration testing. Their role, the testing scope, authorisation and access to information are agreed with the client before work starts.