Capabilities
Specialist services for the risks your business faces.
Our member firms provide specialist services across six cyber capabilities. Each page explains the work, the problems it addresses and the steps involved. Musketeers coordinates the specialists when your needs span more than one area.
Start the Cyber Security HealthCheck- 01 / 06
Incident Response & Cyber Insurance
Prepare for the first 48 hours
Specialist response when an incident occurs, including out of hours, with support for evidence collection and insurance claims. Planning ahead establishes who can make decisions and brings the response team together before an emergency.
Read about this capability - 02 / 06
Cyber & AI GRC
Show how your controls work
Clear senior responsibility for cyber risk, regulatory requirements and AI use, supported by records that show whether controls work. This gives the board the evidence it needs to make informed decisions.
Read about this capability - 03 / 06
Attack Simulation
Test how an attacker could get in
Authorised testing follows potential attack paths through your systems. It checks how weaknesses could be combined and whether your monitoring and response teams would detect the activity.
Read about this capability - 04 / 06
Managed Security
Investigate and respond around the clock
Specialists monitor, investigate and respond to threats 24/7. Independent review checks what the service detects, how alerts are assessed and whether escalation works as intended.
Read about this capability - 05 / 06
Cloud, Identity, AI & DevSecOps
Control access and secure change
Specialist work to secure cloud platforms, user and system access, AI use and software delivery. It addresses how data is stored, who can reach it and how changes are put into production.
Read about this capability - 06 / 06
Third-Party Risk & Due Diligence
Understand the risk from your suppliers
Checks on suppliers, partners and acquisitions that can access your data or disrupt critical services. Reviews and ongoing monitoring are proportionate to the risk, so decisions use more than an annual questionnaire.
Read about this capability