g3-service-hero

Service

Cyber Advisory

A commercial and risk-based approach to cyber security

The G3 cyber team brings decades of experience defining, detecting, and mitigating the most sophisticated threats across both offensive and defensive security. Our senior commercial team works globally with clients to define their key risks, the cyber maturity of their defences, and how to protect their most critical assets.

Our technical operators conduct extensive and sophisticated testing across IT and OT environments, focused on risk reduction and revenue protection. All G3 cyber projects are informed by our unparalleled capability to investigate the dark web.

Risk Assessments

We support organisations in understanding their cyber risks. We provide specialist assessment and support with supply chain security, data security, and operational technology.

Typical assignments

  • Review of the current cyber security programme maturity against risk and threat profile
  • Cross-portfolio assessments with asset roadmaps to achieve target maturity
  • Standardisation of controls across portfolios to enable internal and external benchmarking
  • Cyber incident readiness exercises
  • Cyber risk dashboard documenting critical risks mapped to impact and likelihood
  • Assessment of cyber strategy and operations against future business objectives

Operational Technology Assessments

G3 helps organisations prepare their response and recovery from cyber incidents, establishing the right processes and testing their reliability.

Typical assignments

  • OT security assessments against IEC-62443 and NIST 800-82
  • In-depth Zone and Conduit Analysis to aid network segmentation
  • OT architecture vulnerability review and target network diagram development
  • Design of cross portfolio OT control framework
  • SME support to implementation of industrial DMZ

Cyber Due Diligence

We support private equity funds to understand cyber risks in new markets and potential investments. Our findings have informed the valuation of an asset.

Typical assignments

  • Red flag due diligence to identify required investment
  • ‘Outside in’ external attack surface review to identify key vulnerabilities
  • Full due diligence for CNI assets to identify legacy risks in the infrastructure
  • Market entry advice on the cyber threat and regulatory landscape for fund

Advanced Security Testing

G3 specialises in bespoke, advanced security testing and can translate results into central risk management registers or dashboards

Typical assignments

  • Reverse engineered remotely accessible OT equipment and created 0-day exploit
  • Lateral movement operations from public WiFi to core critical systems
  • Ransomware pre-positioning via exploited remote access
  • Total Enterprise Admin access without SOC detection
  • Spear-phishing compromising IT network and pivoting to the OT environment

Testimonials

Recognised as a market leader by clients and industry bodies.

“G3 surpassed my expectations. Their personnel bring deep expertise and enthusiasm that really makes the difference.”

Group IT / OT Lead, European infrastructure organisation

“G3 understood our business exceptionally well, getting to the fundamental root cause of issues efficiently and effectively.”

Group Head of Internal Audit, Global software organisation

“G3 bring out the best in our group, creating an environment that fosters meaningful discussions.”

Managing Director, North American Fund

“G3 is quick to bootstrap, listen to understand, and ensure results are aligned with our true needs.”

Head Cyber Security Officer, European energy organisation

“There was clear excitement and passion on the engagement. The delineation between low and high tradecraft was an obvious selling point. Very positive.”

Chief Information Security Officer, Wealth and Asset Manager

“G3’s final report was detailed and actionable. The team was highly collaborative, very responsive, and the communication was clear and risk-focused.”

Security Operations Center Manager, Insurance Company

“The teams ability to adapt to our evolving needs and maintain a high standard of delivery was greatly appreciated.”

Managing Director, North American Fund