Company Profile

Muse Cyber is a client-side cybersecurity team. We do not advise from the outside and hand over a report. We take the role: a named fractional CISO who sits inside your governance, with a specialist team behind them, on a rolling retainer.

In practice that means we own your information security management system rather than assess it. We take your board and audit committee reporting. We hold risk acceptance decisions and the risk register. We front your certification audits, your customer security questionnaires and your supply chain assurance. We run your incident response when it happens. If you have an internal security team, we lead it. If you do not, we are it.

The function is staffed as a team, not a person. Each account has a named fractional CISO, a duty-CISO escalation route and 365-day coverage, run to a documented mobilisation and assurance model. That means the role does not stop when one individual is on leave, unwell or between clients, which is the single biggest weakness of both a lone hire and a lone contractor.

We currently act as the security function for organisations across defence and security, financial services, technology and the public sector. Our work includes ISO 27001 ownership, Defence Cyber Certification and Secure by Design readiness, NCSC CAF and GovAssure, third-party risk and incident readiness.

Muse Cyber holds ISO 27001 and Cyber Essentials Plus, is an accredited supplier on G-Cloud 15, and is a signatory to the Armed Forces Covenant. Members of our team hold current SC and DV clearances. Our founder served in the Royal Navy in specialist intelligence roles before moving into commercial security leadership.

If you need to hold a security standard to stay in the defence supply chain, and the honest answer to “who is your CISO?” is currently nobody, that is the gap we fill.

Muse Cyber is based in the City of London and Edinburgh.