Advisory Domains

Advisory work is organised into five domains. Each domain reflects an area in which organisations commonly seek independent guidance, and each draws on the research strength of the Institute.

The domains are not separate silos. A single engagement may touch more than one of them, for example where a continuity plan depends on both policy settings and the security of connected systems. The advisory team shapes the scope of each assignment around the client's actual problem and not around a fixed template.

The five advisory domains

• Critical Infrastructure Strategy: long-term planning for essential assets and services
• Enterprise Risk Governance: structures, roles and oversight for managing risk
• Cyber-Physical Security: protection of connected physical and digital systems
• Policy Advisory: inputs for policy design and institutional reform
• Business Continuity Planning: preparing to sustain essential functions during disruption

Each domain is described in more detail on its own page.