I help organisations protect the information and services they rely on, adopt AI responsibly and prepare for disruption.

Cybersecurity governance and risk

Put resources where they matter most

     When security concerns compete for limited time and money, you need to understand which failures would cause the most harm and which improvements deserve priority.
     I help assess risks, clarify responsibilities and design a practical security strategy. My foresight background helps examine emerging risks and dependencies, alongside weaknesses that are already visible.
     Possible deliverables: a security assessment, risk register, risk treatment plan, governance model or improvement roadmap. ISO/IEC 27001 readiness support can include defining the scope of your information security management system and preparing a Statement of Applicability.
     Reference points: ISO/IEC 27001 and 27002, NIST Cybersecurity Framework and NSM’s ICT Security Principles.

​

Responsible use of AI

Make useful AI adoption easier to manage

     Staff need to know which tools they can use, what information they can share and when outputs need checking. Managers need a way to assess proposed uses and decide whether the benefits justify the risks.
I help design these arrangements around real tasks. My experience in management and systems design helps connect tool choices with workflows, responsibilities and organisational goals.
     Possible deliverables: an AI inventory, use-case assessments, an AI-use policy, tool approval procedures and staff guidance. Where relevant, support can include mapping EU AI Act requirements into actions and responsibilities.

 

Compliance and customer assurance

Make responsible practice easier to demonstrate

     Customers may ask for evidence of security before signing or renewing a contract. Suppliers may need checking before they receive sensitive information. Clear, reusable evidence helps you answer these questions efficiently and identify weaknesses before they become contractual problems.
     I help connect requirements with actual practice and explain the results clearly. My research and communications experience supports accurate documentation that customers, managers and staff can understand.
     Possible deliverables: customer security questionnaire responses, evidence packs, supplier assessments and improvement plans. Depending on the assignment, work may also include documentation and readiness support related to GDPR, Norway’s Digital Security Act or NIS2.

 

Incident preparedness and continuity

Keep essential work moving through disruption

     If a critical system or supplier fails, people need to know who makes decisions, how to communicate and which activities take priority.
     I help design response arrangements and practise them with your team. Foresight methods make scenarios relevant to your organisation, while communications experience helps clarify escalation, responsibilities and messages under pressure.
     Possible deliverables: incident response playbooks, business continuity plans, communication plans, tabletop exercises and practical staff guidance.

​

​

​

 

How we can start

We can begin with a specific decision, customer requirement or operational concern. Through interviews, document review and workshops, I help establish the situation, develop workable options and agree next steps with the people responsible.
     My background in cybersecurity complements my experience in organisational leadership, strategy consulting and futures research. Across these roles, I have helped organisations make sense of unfamiliar, complex problems and decide what to do next.
     The assignment can range from a focused assessment to a governance strategy and implementation plan.
     Contact me to discuss what your organisation needs to assess, design or improve.