Cyber Risk Management Group

Cyber Risk Management Group, known as CRMG, is a cyber security and information risk consultancy. It sizes protection to each client's real risk profile, so organisations neither under-protect nor overspend. The firm says it speaks plainly and avoids sales pressure.

What Cyber Risk Management Group offers

• GRC solutions — governance, risk and compliance services, including data services and a risk tool called Risk Genie.
• Consultancy — cyber security programmes, third-party risk management and cyber risk assessments.
• Compliance and certification — help with DORA, NIS2 and ISO 27001.

Who it works with

Large multinationals and developing enterprises alike, served through a network of partners and consultants in several territories.

Key facts

• Regions: the UK, Europe, the Middle East, Asia and the USA
• Approach: risk-based, weighing the value of information assets against the threats they face
• Standards covered: DORA, NIS2, ISO 27001