• 25+ years in technology transformation, cybersecurity, and risk leadership

• CISSP and PMP certified

• Independent and practitioner-led — no big-4 overhead, no junior delivery teams

• Hands-on across governance, resilience, and delivery, from board reporting to on-the-ground implementation

Andrew Roberts — Founder & Lead Practitioner

Andrew brings over 30 years in IT, the last 20+ of them in global technology internal audit, second-line technology risk, security governance and assurance, infrastructure, transformation, and operational resilience — inside the kind of regulated financial institutions we now work with, not observing them from outside.

That career has taken him across the UK, France, Germany, the US and Spain. He’s now based in Prague, and leads every engagement personally. Wherever the work has been, the discipline has stayed the same: an honest, evidence-based, second-line view — the kind that catches the expensive mistake before it’s built, not after.

Andrew holds CISSP and PMP certifications, and leads every client-facing engagement personally. There’s no account team and no delegated-down juniors between you and the assessment — that’s a deliberate choice about how we work, not a resourcing constraint.