Consultant CISO, security architecture, cloud assurance and AI governance. Strategy the board signs off, and controls your engineers can actually build.
Fixed-scope engagements or ongoing part-time leadership, shaped around your regulatory obligations.
Senior security leadership without a full-time hire. We own the risk conversation with your board and regulators.
Business-driven architecture on SABSA, so every control traces back to a business requirement.
Evidence-based assurance across AWS and Azure. Every control is reported as present, absent or not determined.
Governance that lets you adopt AI safely, from policy through to the design of the platform.
We use AI to build at speed, and our security experts review every line.
Selected engagements across payments, digital banking, development finance and financial regulation.
Designed a cloud assurance framework with an operating model and RACI, then delivered a detailed gap analysis across the AWS estate for CISO and CIO stakeholders.
Led around 15 security architects on a cloud-native core banking platform for a tier-one bank, taken live under strict regulatory scrutiny.
As consultant CISO, founded a security architecture practice from scratch on SABSA and strengthened identity and privileged access across the cloud estate.
Designed a governed retrieval framework on Azure AI Foundry and Azure AI Search, giving staff useful AI inside clear security and data boundaries.
Where the CISO reports decides whether accountability for cyber risk is real. The common reporting lines compared, the patterns that appear when structure is wrong, and ten questions every board should ask.
High-risk AI duties now apply from 2 December 2027. What is already in force, every deadline after the Digital Omnibus, and how an ISO/IEC 42001 AI management system gets you ready in time.
Phil founded Nownet after 27 years in technology and cyber security across regulated financial services and the public sector. His work spans global payments, digital banking, consumer credit, development finance, financial regulation, telecommunications and policing.
He works at both ends of the problem: setting strategy with boards and regulators, and getting into the detail of identity flows, token lifetimes and cloud controls with engineering teams.
We're a London-based cyber security consultancy. We provide consultant and interim CISO leadership, SABSA security architecture, cloud security assurance for AWS and Azure, and AI governance, mainly for regulated financial services.
Banks, payments firms, digital banking platforms, investment organisations and public sector bodies, including work for a UK financial regulator.
Yes. We provide fixed-term interim cover and ongoing part-time consultant CISO leadership, scoped to what you need.
Phil Bennett holds CISSP, C|CISO, C|EH and TOGAF 9, an MSc in Cyber Security with Commendation, and completed the AI in FinTech programme at Saïd Business School, Oxford.
Nownet is based in London and works with clients across the UK, on site and remotely.
Interim leadership, an assurance review or an AI governance question: send a short note and we'll reply within two working days.
sales@nownetsecurity.com