Why annual cyber security training isn't enough
Annual cyber training provides an important baseline, but lasting security behaviours need reinforcement. See how smaller organisations can make training more effective.
4 minute readUK cyber security consultancy
Cyber security that works for your business.
Practical training, policies and expert advice for organisations that need stronger security without the complexity of building an in-house cyber security function.
The challenge
Cyber security shouldn't be harder than it needs to be.
Smaller organisations increasingly need to show customers, insurers and supply chains that their cyber security is in good order. Most don't need, and can't justify, an internal security function to do it.
H Change provides experienced, proportionate support: enough to meet the expectations placed on you, without more than your organisation needs.
No dedicated security expertise
Someone owns IT, but nobody owns security. Decisions get made without an experienced view.
Policies need improving
You've grown, and the informal way of working no longer holds up to scrutiny.
Customers are asking questions
Security questionnaires, tender requirements and insurer checks need credible answers.
Services
Four ways we help.
Each service can stand alone or combine with the others, depending on what your organisation needs.
Train
Cyber Security Training
Help your people recognise cyber risks and make better security decisions.
Awareness · Phishing · Managers · Leadership
Learn moreProtectPolicies & Standards
Put clear and proportionate security expectations in place.
Policy development · Reviews · Policy suites
Learn moreAdviseCyber Security Advice
Access experienced security expertise when you need it.
Health checks · Risk reviews · Improvement planning
Learn moreAssessCyber Security Assessments
Understand your current position and prioritise improvements.
NIST CSF · NIS · Gap assessments
Learn moreThe H Change difference
Experienced. Practical. Proportionate.
Experienced
Security expertise informed by experience across complex UK government and critical infrastructure environments.
Practical
Advice designed to result in action rather than another report sitting on a shelf.
Proportionate
Security appropriate to your organisation, risks and resources.
- 10+ years' experience
- CISM
- UK Government & CNI experience
How we work
Three stages. No mystery.
- 01
Understand
Understand your organisation, requirements and existing arrangements.
- 02
Prioritise
Identify the improvements that matter most.
- 03
Improve
Help put practical improvements in place.
AHFounder photo to be supplied
Founder-led
Experienced advice. Applied proportionately.
H Change was founded by Andrew Hedley, bringing more than a decade of cyber security and communications experience across UK government and critical national infrastructure.
H Change brings that experience to smaller organisations, helping them apply established security practices in a way that reflects their size, risks and needs.
- 10+ years' experience
- CISM
- UK Government & CNI
Services & pricing
Clear scope. Clear pricing.
Where the scope is predictable, we publish the price. Where it depends on your organisation, we tell you what affects it.
Cyber Security Health Check
Understand where you are, what matters and what to improve first.
£595
View detailsCyber Foundations
Health check, core security policies and practical employee training in one package.
£2,250
View packageCyber Security Training
Practical cyber security training tailored to your people and organisation.
From £750
View trainingInsights
Plain-English guidance.
Short, practical articles on the questions smaller organisations actually ask.
Free 20-minute consultation
Not sure where to start?
You don't need to know exactly what support you need. Tell us a little about your organisation and what has prompted the conversation, and we'll help you work out the next step.