top of page
Pinpoint hero - City at dusk.png

Your virtual CISO.

​Clear direction. Confident decisions.

Independent, board-level cybersecurity leadership for organisations adopting AI, managing enterprise risk and answering to regulators and investors.

Led by Derek Whigham, formerly of Lloyds Banking Group's Chief Security Office, with 28 years in cyber defence.

 

Board & vCISO Advisory / Safe AI Adoption / Enterprise Risk Management / Cyber & Insider Risk / Continuous Control Validation

What Pinpoint Does

BOARD, NED & vCISO ADVISORY

Independent security leadership, governance, board reporting and security roadmaps.

 

SAFE AI ADOPTION

Governance, assurance and guardrails so your organisation can adopt AI, copilots and agents with confidence.

 

ENTERPRISE RISK MANAGEMENT

One ISO 31000-aligned register for cyber, technology, supplier and operational risk, with clear appetite and ownership. Unmanaged, risk surfaces as incidents, failed audits and collapsed deals.

 

CYBER & INSIDER RISK

Insider threat programmes, threat-informed defence and executive decision support.

 

CONTINUOUS CONTROL VALIDATION

Evidence, not assumption: CTEM, breach-and-attack simulation and continuous compliance validation.

 

DUE DILIGENCE, BACKGROUND CHECKS & INCIDENT READINESS

Investor-grade reviews, advanced background checks for cyber and M&A, response planning and executive advisory.

 

SECURITY TRANSFORMATION

Turning complex technology, operating-model and compliance challenges into measurable progress.

 

BOARD & TEAM TRAINING

Practical sessions for start-up and scale-up boards, founders and teams: cyber governance, Safe AI for leaders and security essentials.

Pinpoint about - Boardroom.png

Experience behind the advice.

 

Pinpoint is led by Derek Whigham, formerly Chief Product Owner in the Chief Security Office at Lloyds Banking Group, Senior Advisor to AttackIQ, Non-Executive Director at Acumen Cyber, Research Director for AI and Quantum at ISACA and an advisor to the MITRE Center for Threat-Informed Defense.

 

We connect board-level priorities with practical security action: clear ownership, a focused roadmap and evidence you can act on.

bottom of page