Turn your security improvement plan into working controls.
Knowing what needs fixing is only part of the job. I’ll help put the agreed improvements into practice, working with your team and IT providers to plan changes, implement them and hand over clear documentation.
Indicative projects from £10,000 + VAT where applicable.
Scope and final fee agreed before work begins.
Discuss your implementation project
Tell me what you want to put in place, what prompted the work and who manages your IT. I’ll reply to discuss whether Ronin can help and what we need to scope the project.
Useful starting points:
• The improvements you want implemented, or the report they came from.
• The main systems and providers involved.
• Any deadlines, operational constraints or change windows.
• Who will authorise changes and help coordinate the work.
Before you send
Please don’t include passwords, credentials, or other sensitive information in an initial enquiry. If we need to share anything sensitive, we’ll agree a secure way to do it.
Practical help getting the changes done
Security recommendations can stall when your team lacks time, specialist experience or clear ownership. A scoped implementation project gives agreed improvements a delivery plan, with responsibilities and checks defined before changes begin.
-
Project step
A defined implementation plan
Agree the changes, systems involved, dependencies, responsibilities and measures of completion. Identify any licences or third-party work needed.
-
Project step
Agreed security controls put into practice
Depending on scope, work may include identity and privileged access, network or cloud separation, supplier access restrictions, and protection of backup administration. Each project covers only the changes agreed in writing.
-
Project step
Controlled changes and practical checks
Coordinate approvals and change windows with your team. Agree appropriate backups, rollback arrangements and checks for both the intended security behaviour and affected business functions.
-
Project step
Documentation and handover
Receive a record of the changes, relevant configuration documentation, known limitations and guidance on ongoing ownership and maintenance.
Indicative projects from £10,000 + VAT where applicable. Scope, deliverables, responsibilities, timetable and final fee are agreed before commitment.
Discuss my projectHow it works
A scoped implementation project turns agreed recommendations into planned, controlled changes.
We start with your improvement plan, your existing environment and the outcomes you want. Recommendations from Ronin or another provider can inform the project.
You don’t need to have purchased a Ronin review first. If your existing plan provides enough detail, we can scope implementation from it. Otherwise, we’ll agree any assessment or discovery needed before proceeding.
- Review the starting point — Discuss your improvement plan, existing environment and desired outcomes.
- Agree the project — Confirm deliverables, access, responsibilities, dependencies, acceptance checks, timetable and price. Identify any discovery needed before a firm proposal can be made.
- Implement and check — Carry out authorised changes in agreed stages, coordinating with your team and providers and checking the results.
- Hand over — Review the completed work against the agreed acceptance criteria, document outstanding items and explain what your team needs to maintain.
About Ben
I lead Ronin, an independent cybersecurity consultancy.
With over ten years in the sector, including time as a consultant at NCC Group, I work closely with small teams, leaders and their IT providers to ensure clear and practical communication.
I’ll work with you to turn agreed recommendations into practical changes, with clear responsibilities and a handover your team can use. Where your existing IT provider owns part of the environment, we’ll coordinate their involvement from the outset.
Questions,
answered plainly
Common questions about Security Implementation Support.
What kinds of changes can you help with?
Depending on the environment and agreed scope, projects may cover identity and administrator access, network and cloud separation, third-party access, and protection of backups. We confirm the suitability and boundaries of the work before quoting.
Do we need a Defence-in-Depth Review first?
No. We can work from an existing improvement plan where it provides enough information. If further assessment is necessary, we’ll explain what is needed and agree it separately.
Will you work with our IT provider?
Yes. We agree who is responsible for each change, who can authorise it and where your provider’s involvement is required.
Will changes disrupt our business?
Some changes may require maintenance windows or affect how people access systems. We discuss the expected impact, dependencies and rollback arrangements before implementing them. We do not promise disruption-free changes.
Does £10,000 cover everything?
No. Projects start from an indicative £10,000 plus VAT where applicable. The final fee depends on the agreed work. Licences, hardware and third-party costs are identified in the proposal, including whether they are included or payable separately.
How do we know the work is complete?
We agree deliverables and acceptance checks before starting. At handover, we review the work against those criteria and document any remaining limitations or outstanding actions.
Is penetration testing included?
Only if explicitly included in the proposal. Implementation checks confirm the agreed changes and their intended behaviour. A separate penetration test can assess how the resulting controls hold up against realistic attacks.
Do you provide ongoing support?
Ongoing advisory or maintenance work can be agreed separately. Any support included with the project will be stated in the proposal; this service does not imply unlimited support or 24/7 incident response.