NCSC-Assured Cyber Risk Management and Sovereign SOC Services for UK Critical Sectors

Founded in 2013 by Tony Badsey-Ellis and Tony Beadle — the two Ts behind the name — the Leicester-based consultancy provides high-assurance cyber security to UK central government, defence and intelligence organisations, critical national infrastructure operators and telecoms providers. Work spans three linked disciplines: cyber risk management, security architecture design, and security monitoring. Clients are typically organisations whose systems handle sensitive or classified workloads, that face nation-state-grade threats, and that must evidence their security posture against government frameworks rather than commercial checklists.

The methodology is productised in RiskTree, a cloud platform that replaces spreadsheet risk registers with attack trees. Analysts model threats in the RiskTree Designer, then the Processor scores and ranks them, producing prioritised risk levels, bow-tie diagrams, Monte Carlo quantification and read-only reports for stakeholders; the company states that assessments which once took weeks can complete in under a day. Alongside it, the Advanced Security Operations Centre layers SIEM aggregation, behavioural anomaly detection, network detection and response, threat intelligence and continuous vulnerability scanning.

Differentiation rests on sovereignty and accreditation rather than proprietary detection technology. The firm holds NCSC Assured Service Provider status for risk assessment, staffs UK-based monitoring with NCSC/CCP-certified analysts, and sells through Crown Commercial Service and Dynamic Purchasing System framework agreements. Its SOC is deliberately vendor-agnostic across major SIEMs, cloud platforms and ICS/OT estates, with partnerships including Corelight, Endace, Splunk and Tenable. Published work covers Cyber Assessment Framework reviews, cross-domain and secret mobile architectures, and virtual CISO advisory.