Fractional services
Most organisations that need a threat intelligence function do not need a full-time one. Embedded, accountable leadership on a retained basis — building the capability, running it, or covering it while you recruit.
Who this is for
There is a gap most regulated firms pass through. Too large to carry on without an intelligence function, too small to justify hiring a threat intelligence lead at market rate — and under enough regulatory pressure that "we subscribe to a feed" is no longer an answer that survives a supervisory conversation.
The usual responses both fail. Buying a platform gives you data and nobody to interpret it. Hiring a junior analyst gives you someone capable of collection but not of setting requirements, briefing an executive committee, or defending a position to a regulator.
What is actually needed is a small amount of senior time, applied consistently, with real accountability attached.
The roles
The core offer. Own the intelligence function — set and maintain priority intelligence requirements, direct collection, quality-assure analysis and reporting, represent intelligence in internal governance, and act as the intelligence authority in regulatory conversations and threat-led testing. Suited to firms building a capability from very little, or running one that has never had senior direction.
Broader security leadership where the requirement extends past intelligence — security strategy, risk reporting to board and audit, vulnerability management, supplier and third-party assurance, regulatory engagement, and building the operating model. Available where the fit is genuine rather than as a default.
Cover for a vacant lead role while you recruit, parental or extended leave, or a defined programme such as a first TLPT, a DORA readiness push, or standing up a function ahead of a supervisory review.
In practice
Fractional does not mean occasional advice. It means a named person with defined responsibilities and things they are answerable for.
What the organisation needs to know, who decides on the basis of it, and what would change as a result.
Collection priorities, analytic standards, reporting cadence, tooling decisions, and the quality bar.
Coach existing analysts, set the tradecraft standard, and build capability you eventually own outright.
Brief executives, risk committees and boards in language that supports a decision rather than displaying activity.
Evidence the function to supervisors and auditors, and lead the intelligence side of threat-led testing.
We take on a small number of fractional arrangements at any one time, because the value depends on genuinely knowing your organisation. If the fit is not right, or the time available is not enough to make a difference, we will say so rather than take the retainer.
Questions
A consultant delivers a piece of work and leaves. A fractional lead holds a role, sits in your governance, and is accountable for the function performing. The distinction shows up when something goes wrong — a consultant's engagement has ended, a fractional lead's has not.
Yes, and it is a common reason firms start. But note the boundary: if we hold the internal intelligence role, we cannot also act as your external threat intelligence provider for the same regulated test. Those must be separate. We will tell you which side we are on before the engagement starts.
Usually that is the point. The most common arrangement is one or two analysts who are capable but lack direction, requirements and a route to the board. Adding senior leadership to an existing team is far more effective than replacing it.
Yes — interim cover and defined-term contract arrangements are available, including through agencies and framework suppliers where that is how you procure.
It depends on the days and the term, so we price it after a scoping conversation rather than publishing a rate card that would be wrong for most people. There is no charge for the initial conversation.
Contact
Thirty minutes, no pitch deck. Tell us what the gap is and we'll tell you honestly whether a fractional arrangement fixes it.