GRC
Cyber GRC
ISO 27001, NIST CSF, Cyber Essentials readiness, policy frameworks, regulatory readiness, and risk management that proves security is managed properly.
Explore GRC →Cybersecurity advisory for UK SMEs and mid-market firms
Your business has cyber risks you don't know about.
We find them, rank them, and tell you exactly what to fix first. Strontian Ltd provides senior-level cybersecurity advice across governance, risk, compliance, IAM, and programme remediation — without jargon or generic reports.
Senior practitionerIT and security leadership across regulated environments
Fixed scopeKnow the cost and output before we start
5 daysFrom intake call to report delivery
Services
Three practice areas. One front door.
The Cyber Health Check diagnoses what matters first. From there, Strontian can go deeper on governance, remediation, or identity architecture when needed.
FIX
Programme Remediation
When an audit, breach, or board directive demands action, we lead the fix — multi-workstream, evidence-led, and stakeholder-ready.
Explore remediation →IAM
IAM Security Architecture
Who can get to what, how you know, and how you prove it. IAM, PAM, zero-trust, access governance, and target-state architecture.
Explore IAM →
Fixed-scope diagnostic
Not sure where to start? Start here.
The Strontian Cyber Health Check is a fixed-price diagnostic. An hour of your time. A plain-English report in 5 days. Your top 5 cyber risks ranked by business impact, with a fix roadmap you can use today.
from £995*
Refund if nothing actionable is found.
View the Health CheckWhat you get
- 60-minute remote intake interview
- Review of your existing security setup, if available
- Board-ready PDF report
- Quick wins you can action this week
- Prioritised 90-day remediation roadmap
About Strontian
Senior cyber advice, built for companies that need clarity.
Strontian Ltd was founded by Lee Johnson, a CISSP accredited cybersecurity practitioner with deep experience across Cyber GRC, IAM architecture, and large-scale programme remediation.
Before Strontian, Lee held senior security and programme roles across regulated environments including Mastercard, AXA, Vodafone, and NEST — places where audit evidence, stakeholder confidence, and disciplined delivery matter.
MastercardAXAVodafoneNEST
Your clients, investors, and regulators are asking about security. Have you got an answer?
Enquire about a Cyber Health Check. One hour. One report. Complete clarity on where you stand — and exactly what to do next.