Ensure your tech company gains complete visibility into its threat landscape with an organisation-wide risk assessment aligned to NIST or customised to your operational realities — I map assets, identify gaps, quantify impact and prioritise remediation so executives and engineers can make informed, timely decisions. The result is a single, actionable view of risk that drives consistent governance, improves incident response, supports compliance, and focuses scarce resources on the highest-return controls, reducing downtime and strengthening customer trust.

Assessing SDLC maturity against OWASP SAMM alongside my own privacy-specific controls, delivers a comprehensive view of privsec across the development lifecycle. By mapping your controls to SAMM’s domains, assigning maturity levels, and using evidence-based metrics (e.g., percentage of projects with completed DPIAs, automated data-flow inventories, or frequency of privacy unit tests), you gain actionable insights into gaps, remediation priorities and cross-functional accountability. The result is a unified privsec maturity profile that drives investment decisions, informs training and tooling roadmaps, and embeds privacy as repeatable, measurable practices within the SDLC rather than an afterthought.

Performing and facilitating threat assessments using LINDDUN and PLOT4AI to give your product team a rapid, cost-effective, and practical insight into the risks you are facing in terms of data privacy and/or AI implementation. If you only start risk assessment once you go to code, you’re already too late!