PRACTITIONER BACKGROUND
Experience behind the advice.
Piton is led by a security practitioner with 25 years in information security across telecommunications, e-commerce, and media.
That background includes building and running security programs, leading incident response, setting security budgets, and assessing security for customer reviews and acquisitions.
You work directly with the practitioner leading the engagement, from defining the scope to explaining the findings and next steps.
Start with a decision.
Every engagement begins by defining the question, the relevant systems, and what a useful answer will enable.
Check what holds.
Policies and inventories matter, but claims are tested against evidence and the way controls operate in practice.
Make the next move clear.
Findings are tied to business impact, ownership, and realistic remediation so teams know what to do first.
WORKING PRINCIPLES
Direct advice.
No theatre.
- Independent advice
- Recommendations follow the evidence and the decision you need to make. Uncertainty and scope limits are named.
- Written authorization before testing
- Testing begins after written authorization defines the systems, permitted activities, and boundaries. Changes to scope are agreed in advance.
- Agreed evidence handling
- Before work begins, agree on the evidence needed, how it will be shared, who can access it, and how long it will be retained.
- Plain reporting
- Reports explain what was observed, what remains uncertain, and the practical next actions, with clear priorities and ownership.
Piton provides assessment and advisory work. It does not issue certifications or audit opinions, and incident response is outside the fractional leadership retainer.
WORK WITH PITON
Bring the hard question.
We’ll find the most useful way to answer it.