Risk & roadmap reviews
Track open security priorities, decisions, dependencies and progress against agreed actions.
ONGOING SUPPORT
Keep security decisions moving after the assessment.
ISTA Protect is designed for businesses that need a regular advisory rhythm: reviewing risk, maintaining the roadmap, improving AI governance and giving management a clearer view of progress.
AI governance
Maintain policies, approved-tool decisions and practical governance as AI adoption changes.
Management reporting
Provide leadership with a concise view of priorities, decisions and improvement progress.
Security advisory
Discuss architecture, supplier, control and implementation questions as they arise.
Incident readiness
Review roles, escalation, recovery considerations and practical preparedness within scope.
Continuous improvement
Adjust the roadmap as systems, suppliers, business priorities and AI use evolve.
PACKAGES
Two clear starting points.
ISTA Protect
£999 / month + VAT
Ongoing cyber and AI security advisory for growing SMEs.
- Regular risk and roadmap review
- AI governance support
- Management reporting
- Advisory time for agreed priorities
Protect+
£1,999 / month + VAT
Broader advisory support for organisations with more active security requirements.
- Everything in Protect
- Expanded supplier risk
- Incident readiness
- Architecture and project advisory
Custom
Scope based
For organisations with requirements that do not fit the standard packages.
- Agree priorities and cadence
- Define deliverables
- Set decision and reporting rhythm
- Review scope as needs change
POSITIONING
Advisory support — not a 24/7 SOC.
ISTA Protect is intended to strengthen security direction, governance and improvement. It is not positioned as continuous security monitoring, managed detection and response, or an emergency response retainer unless separately agreed.
A good fit when
- Security responsibility is shared across IT and management
- AI adoption needs ongoing governance
- Projects need an experienced security perspective
- Leadership wants regular risk and progress reporting
FAQ
Common questions
Is ISTA Protect a 24/7 SOC?
No. It is ongoing advisory, governance, risk and improvement support and should not be confused with a 24/7 security operations centre.
Can scope change over time?
Yes. Scope should be reviewed as business size, systems, AI use, projects and risk change.
Is there a minimum contract term?
Commercial terms are agreed in the proposal or contract for each client.
ONGOING SECURITY DIRECTION
See whether ISTA Protect fits your organisation.
We can discuss your current responsibilities, priorities and the advisory cadence you need.