Vikram Mohan

Cybersecurity Capability Uplift

Leading the Security and Digital  Transformation of Enterprises, Public Sector Agencies, Critical National Infrastructure, and Small businesses.

• Cybersecurity Programme Delivery
• Cybersecurity Maturity Assessment
• Improving the security of Platforms, Systems and Data
• Data Governance implementations
• Becoming Identity-centric and Secure by Design
• Trust and Compliance services
• Ransomware readiness and recovery
• Cybersecurity Operations Transformation
• Threat Intelligence and Incident Response Readiness
• Internal audit of security and control environments, from experience in a major European bank's audit team

AI Adoption and Governance

Advisory and assurance services to help organisations adopt AI and govern its use in line with recognised standards and applicable regulation.

An illustrative approach is described in the Thought Leadership section of this site: the AI Governance Reference model, together with a searchable NIST framework reference.

• AI Inventory - Technical Discovery & Shadow AI Management
• AI Inventory Visibility, Control Gap & Risk Management
• AI Control Fabric Strategy & Implementation Oversight
• AI Trust, Risk, and Security Management (TRiSM) Implementation
• Enable AI governance within release management
• Audit & Assurance Reviews for AI adoption

Technology Due Diligence and Compliance

Validation of Technology capabilities: IT assets, systems, processes, policies and procedures with the intent to identify, assess and identify key risks in Technology and Operational functions which in turn provides a view into risks to business functions

• IT Strategy & Roadmap
• Platforms & Applications
• Initiatives, Projects, and Spend Prioritisation
• Infrastructure and Security
• Business of IT and Processes
• Investments & Business Case

Workforce Structure and Contract Design

Most workforce disputes trace back to a decision made years earlier: a role defined loosely, a contract that never said who was responsible for what, a shift pattern nobody checked against the working time rules. Vikram has seen those decisions examined in the Employment Tribunal. He works with organisations before that point, on the structures and documents themselves.

• Staffing models, including outsourced and offshore teams
• Contracts and statements of work with clear responsibilities
• Working time and rest break compliance in the operating model
• Grievance handling and tribunal readiness