Keystone

Keystone - our leading edge technology governance and risk platform

Set your organisation up for successful AI and technology adoption with a solid understanding of where you are today.

Our services include

  • Foundation assessment

  • Keystone advisory for ongoing reporting and improvements

  • Risk, security and compliance oversight

  • Supporting tools and processes to reduce risk, enhance Cyber security and enable effective AI adoption.

Keystone

Make confident security and governance decisions, starting with a clear view of where you are.

Brightly's governance and risk framework. We give you and your leadership team an objective picture of your cyber security, privacy and governance, and a prioritised plan for what comes next.

How keystone works

Understanding the security situation

Most business owners and boards reach a point where the questions about data, security and governance get harder to answer. Often the honest response is "we're not completely sure."

That's fair enough. These things are easy to put off and hard to see clearly, and it's tempting to start with a fix in mind before asking the more useful question: where are we today?

Keystone answers that first. Once you can see where you stand, every decision after that is better informed.

Can you confidently answer these?

Six questions every leadership team should be able to answer about their organisation:

  • Do we know exactly what data we hold, and where it lives?

  • Who has access to it, and should they?

  • If our key systems went down today, would we know which ones to bring back first?

  • Do we know how AI is being used across our business, and with what data?

  • Where do our biggest risks sit, and where should we invest first?

  • Could we show a key client, insurer or our board that we're managing this well?

If any of these give you pause, that's exactly where Keystone starts.

How Keystone helps

Keystone comes in two parts. Foundations gives you a clear picture of where you stand. Advisory helps you act on it and keep improving.

Keystone Foundations

A one-off discovery and assessment engagement.

We take the time to understand your business, your technology and your appetite for risk, then assess where you stand against the NIST Cybersecurity Framework (a widely used international standard for managing cyber risk) and New Zealand's Privacy Act 2020.

You come away with a prioritised view of your strengths, gaps and risks, a shared understanding across your leadership team, and a Findings Report that shows you exactly where to focus first.

What you receive:

  • Discovery Workshop

  • Security and Privacy Assessment

  • Security Baseline Assessment

  • Risk Register

  • Findings Report

  • Playback Session

Keystone Advisory

An ongoing governance engagement, following Foundations.

Advisory keeps your picture current and keeps you moving. We shape it with your leadership team and adjust it as things change.

In practice it usually means:

  • Regular governance sessions to review key decisions, actions and risks

  • Working through policy reviews together

  • Keeping your risk register up to date

  • Preparing board-ready updates

  • Being on hand for the security and privacy questions that come up

Advisory helps you decide which risks to tackle first and keeps them moving, so the important things get actioned in the right order and your leadership team can always see where things stand.

Ready to see where you stand?

If you'd like a clear, honest view of where your organisation sits today, we'd love to talk it through. No pressure, and no assessment needed to start the conversation.

Book a call

Services

  • Fractional CIO, CTO & CISO Services NZ

    Brightly gives you access to senior technology thinking on a fractional basis. Whether you need ongoing strategic guidance, a second opinion on a pivotal decision, or someone to shape your IT roadmap, we step in with the experience and independence to make it count.

  • Cyber security

    Practical, people-first security foundations - policies, frameworks (NIST), compliance (ISO).

  • Project Management and Delivery

    IT projects come with a lot of moving parts. We bring the project leadership, business analysis and hands-on delivery needed to get things done properly — while keeping disruption to a minimum for the rest of your team.

  • Al & Automation

    There’s an incredible amount of enthusiasm for AI and it really is a game changer, but only when it’s done right. Our team can help you geet off to the right start including AI governance and adoption - without standing in the way of innovation.

  • Managed Services

    Technology works best when it's set up around your people, not the other way around. We help shape and maintain an IT environment that supports how your team actually works — keeping things secure, stable and well-managed so your business can focus on what it does best.

  • Technology Support

    We know that you invest in technology to support your team and help them to have a better work experience. There’s nothing worse than when those critical systems go down or your team simply hit a roadblock with what they are trying to accomplish.

    Click Here

  • Training AI and Emerging Technologies

    Whether your teams need more out of the basics or are pushing the boundaries of leading edge technology, we have the expertise and can create the right approach to prove the training and support they need.

    Click Here

  • SaaS & Cloud Infrastructure management

    Most organisations now run on a mix of cloud platforms and SaaS tools. We bring structure and oversight to your cloud environments, so that you know what you have, what it costs, who can access it, and that it's all set up securely.

    Click Here