Site guide
Find your way around Cigma.
Our services, client work, free tools and practical insights, all in one place.
About and contact
Services
- Fractional CTO Leadership
Fractional CTO support for UK businesses: technology strategy, supplier decisions, delivery oversight and board advice from an experienced senior adviser.
- Technology Decision & Risk Review
Independent technology strategy, architecture direction and transformation support for UK businesses — practical plans that can actually be delivered.
- Technical Due Diligence
Independent technical due diligence for UK investors and acquirers: architecture, security, delivery capability, risks and the cost of putting things right.
- Fractional CISO Leadership
Virtual and fractional CISO support: security governance, cyber risk, ISO 27001, resilience, incident readiness, supplier risk and board reporting.
- ISO 27001 Readiness
Structured ISO 27001 readiness support: honest gap assessment, sensible scope, control ownership, evidence and audit preparation for UK organisations.
- Cyber Resilience Review
Business continuity, disaster recovery and incident readiness support for UK organisations — practical resilience work with named ownership and tested plans.
- AI Decision & Governance
Independent AI decision support covering use-case value, data readiness, vendor evaluation, build versus buy, governance and delivery assurance.
- AI Readiness Review
A structured AI readiness review: data, process and capability assessment, use-case shortlist and a plain-English brief for leadership.
- AI Governance Review
AI governance support: named ownership, acceptable-use policy, GDPR and AI Act obligations, board reporting and incident planning for deployed AI systems.
- AI Tool Evaluation
Independent AI tool and vendor evaluation covering business fit, data, security, cost, integration and a clear buy, wait or reject recommendation.
Client work
- All case studies
- Building an auditable ISO 9001 and ISO 27001 management system for a growing software business
- Strengthening security, backups and disaster recovery for a banking organisation
- Providing long-term technology and resilience leadership for a specialist insurer
- Connecting compliance requirements to software delivery and evidence
- Defining disaster recovery responsibilities for an international professional services firm
- Connecting operations, marketing and system delivery for a specialist conference business
- Strengthening provider delivery through systems, training and continuity planning
Free assessment tools
Published insights
- Insights library
- When AI Gets It Wrong, Who Owns the Decision?
- Can Your Backup Actually Restore the Business?
- Your Technology Programme Is Busy. Is It Going Anywhere?
- The AI Demo Was Impressive. Is the Business Case Any Good?
- Seven Board Questions That Expose Who Really Owns Cyber Risk
- The Renewal Email Has Arrived. Should You Actually Sign It?
- DORA Explained for UK Firms: What Matters in Practice
- Why Growing Firms Need Governance Before They Need More Software
- Why UK AI Initiatives Stall After the Pilot Stage
- Do You Actually Need a CTO Yet? A Decision Framework for Growing Businesses
- What a Virtual CISO Actually Does — and When It Makes Sense
- The AI Readiness Checklist for UK SMEs
- Fractional CTO vs Full-Time CTO: Cost, Risk and When Each Makes Sense
- What UK Leadership Teams Still Get Wrong About Cyber Risk
- ISO 27001 Readiness: What to Fix Before You Start
- What to Look for in a Fractional CTO — and the Red Flags to Avoid
- Why Buying an AI Tool Is Not an AI Strategy
- The Real Cost of a Breach for a Mid-Market UK Business
- How Long Does ISO 27001 Actually Take for a UK SME?
- GDPR and AI: What Needs to Be in Place Before Deployment
- Why Mid-Market Businesses Struggle to Turn Tech Spend Into Results
- The Leadership Gap Behind Failed Transformation Programmes
- How to Tell When Technology Is Starting to Hold the Business Back
- What a Good CTO Should Fix in the First 90 Days
- How to Identify an AI Use Case Worth Backing
Website policies
Looking for a simple reference? Read the plain-text site guide.