Security by Sector

Why sector matters

Most security advice is written as though every organisation faces the same problem. They don't. A conveyancing solicitor and a haulage firm both need multi-factor authentication, but the reason they are being asked for evidence, the standard they will be measured against, and the thing an attacker wants from them are entirely different.

These pages set out what we actually see in each sector — the regulator or customer applying pressure, the findings that recur, and where testing budget is best spent first.

What is consistent across all of them

• Business email compromise is the most common route in, in every sector without exception.
• The trigger is usually external — a client questionnaire, an insurer, a funder, a regulator or a tender, rarely an internal decision.
• The first answer is usually Cyber Essentials, not a penetration test, and we will tell you when that's the case.
• Scope creep is the main cost driver, and it comes from unclear requirements rather than complex systems.

Sectors

Pick the closest fit below. If your sector isn't listed — recruitment, property, hospitality, energy, professional membership bodies — the underlying work is the same and we're happy to talk it through.

Common questions