Security and Resilience for Business
Know your priority risks, invest where it matters and make confident decisions. We help businesses protect their people, operations and profits, strengthen resilience, and secure their future.
Request a call backKey services
Explore the risks behind the service names. Click a service to expand the details and see how we can help.
Governance means agreeing who is responsible and how decisions are made. Risk management helps you decide what needs attention. An audit checks whether the agreed approach is being followed.
How we help
We simplify policies, assign owners and organise evidence. We also help teams track findings through to action, so issues do not sit in a report without being fixed.
vCISO and regulatory compliance
Get virtual Chief Information Security Officer support, clear Board-level priorities and help translating regulatory requirements into practical controls.
Regulatory compliance · Security strategy and leadership
Clear responsibilities and useful evidence for your leaders, staff and auditors.
View servicePeople and security is about how staff handle information, access systems and respond to problems. Phishing is a fake message designed to trick someone into sharing information or taking an unsafe action.
How we help
We shape training around real roles, review access when people join or leave and use practical exercises to test understanding. Results show where further support is needed.
We also help align physical access, workplace security and personnel controls with the risks facing your business.
Build safer everyday habits and make it easier to spot and report a concern.
View serviceThird-party risk management (TPRM) means checking the risks that come from companies you rely on. A supplier may hold customer data or run a service you cannot work without.
How we help
We help you identify your key suppliers, check their security and agree who will fix any gaps. Regular reviews keep those checks useful as things change.
Know where supplier trouble could become your problem, and what to do about it.
View serviceArtificial intelligence (AI) tools can write, analyse information and support decisions. AI governance means setting rules for their use, with people responsible for checking the risks and results.
How we help
We help you understand where AI is used, what data it handles and who approves it. Clear guidance and human checks support safer use as tools and requirements change.
Use AI with clearer limits, better oversight and less guesswork.
Explore AI governanceSecurity operations is the day-to-day work of watching for threats and dealing with them. Suspicious sign-ins or unusual activity can be early signs of a problem.
How we help
We review monitoring and response plans, clarify who acts on an alert and practise realistic incidents. We also help teams check how they would restore important services.
Give your people a tested response, so they can act with less confusion when something goes wrong.
View serviceSecurity by design & architecture means designing how your systems are protected. It covers who can sign in, what they can reach and how important information is separated.
How we help
We review access rights, powerful administrator accounts and the links between systems. We help you choose and improve safeguards around the data and services that matter most.
From project requirements and supplier selection to design reviews and pre-launch checks, we help delivery teams build in proportionate protection.
Security by design and project assurance
Make it harder for a single mistake or compromised account to spread into a wider incident.
View serviceThe West Brom · Client perspective
Hear how Logica Security helped West Bromwich Building Society turn its findings into practical next steps.
“Logica Security didn’t just hand us findings, they gave us a plan we could actually act on.”
Damon Morris
Chief Information Security Officer
West Bromwich Building Society
Client case study
Cyber security in practice at West Brom Building Society.
Logica reviewed security risks and controls, then brought the findings together in a three-year cyber security plan. It gave the Board a clear view of what needed attention, where to invest and who would own the work. The Board approved the strategy, giving teams an agreed direction for the next three years.
Logica provided security assurance for West Brom’s £100m digital transformation programme. This meant reviewing architecture and supplier decisions from the design stage, so security could be built into the changes. Resilience testing focused on the services members rely on. The £100m figure is the value of the transformation programme, not a saving or the value of Logica’s work.
Phishing emails try to trick people into clicking unsafe links or sharing information. After structured simulated phishing tests and training, West Brom recorded over 60% fewer clicks in these tests. Reports of suspicious emails also increased. This showed a change in staff behaviour during testing; it does not mean that phishing risk has disappeared.
Built to provide full business resilience
Our primary focus is financial services, with support for other regulated industries. Explore the risks that matter to your organisation and the people who rely on it.
Customers need to reach their money, make payments and trust you with their personal data. We help financial firms find weaknesses, manage suppliers and test their response to disruption. This gives leaders clearer decisions and evidence of what works. The rules differ by firm, so we start with the duties and services that apply to you.
A failure in a key system or supplier can interrupt essential services. We help you identify those dependencies, protect access and prepare for incidents. The aim is to reduce disruption and support safe recovery. Start with the services people rely on, then check the systems, suppliers and responsibilities behind them.
Public services depend on accurate information and reliable systems. We help teams understand who can access data, what suppliers are responsible for and how to respond if something goes wrong. Clear ownership and usable evidence support better decisions, while security checks help protect the people using the service.
An outage can stop production, delay deliveries and affect customers. We help you understand how business systems, people and suppliers connect, then prioritise the gaps that matter most. Clear access rules, supplier checks and response plans support more reliable operations. Requirements should match the work you do and the rules that apply.
Get a clear next step
Facing a supplier concern, a major project or a difficult Board question? Talk through the risk, what is already in place and what needs to happen next.
Simon Seymour-Perry draws on over 30 years in technology and security to help you make that decision. Start with one priority. Agree a useful next step.
Speak with Simon
How we work with you
Move from what your policies say to what your organisation can show. We agree the scope around your risks and the evidence you need.
Review the controls, people and suppliers behind your critical services. Compare documented processes with how they work in daily use.
A clear view of the gaps that matter and what to address first.
Set priorities, name owners and put the agreed changes into practice. Bring security, risk and delivery teams together around a plan they can act on.
A practical plan with clear ownership and evidence of progress.
Use proportionate control testing and incident exercises to find weaknesses before a real event exposes them. Feed the findings back into your controls and response plans.
Evidence to support decisions, with actions to close the remaining gaps.
An initial conversation does not commit you to an assessment or a project.
Free practical guides
Practical guidance to help you spot gaps, ask better questions and decide where to focus. Explore a guide to see what’s inside.
If you decide why and how personal data is used, you are the controller. A supplier using it on your instructions is a processor. Under UK GDPR, the UK’s data protection rules, you must:
TPRM is a way to manage risk, not one law for every supplier. Duties depend on the data, relationship and sector. Logica helps you turn these checks into practical work.
Get the free supplier risk guideFor financial firms within its scope, DORA sets legal duties across technology risk, incident reporting, testing and supplier oversight. Your firm remains responsible when services are outsourced.
DORA is not a blanket UK rule. EU operations or supplying EU financial firms may bring duties or contract requirements. Logica helps you assess the gaps and plan the work.
Get the free DORA guideBefore we speak
Certification is useful evidence within its scope. It does not guarantee that every control works every day, or that your people and systems are ready for an incident. We help you check what happens in practice and decide where more work is needed.
No. Good security reduces risk and improves your ability to detect, respond and recover. The aim is tested controls, clear responsibilities and current evidence, not a promise that nothing will ever go wrong.
We start with what is already in place. We can add an outside view, specialist support or clearer evidence for the Board alongside your existing team and providers.
We discuss the priority you want to explore, your current position and the outcome you need. If further work would help, we agree its purpose and scope before starting.
No. Start with the issue or decision in front of you. We can help work out what support would be useful.
Yes. Colleagues from risk, finance, operations, technology and Board oversight are welcome. You can arrange a time together or request a call back.
