cordone.ltd

What It Is

Cordone Ltd is an information security consultancy centered around the individual expertise of Phil Cracknell. The site highlights his extensive experience across European information security, CISO roles, government health checks, industry advisory work, wireless security research, and security conferences. Listed services include Cyber Breach Playbook creation, scenario exercises, incident response planning, compliance, training, gap analysis, interim CISO services, penetration testing, and security metrics reporting. This is not a typical security software product or managed platform; it is more of an expert-led governance and response consultancy.

Core Capabilities and Dimensions

In terms of protection scope, Cordone covers incident response readiness, compliance assessment, security awareness, maturity assessment, and penetration testing, with a focus on “management systems + practical exercises.” On compliance, the site explicitly mentions PCI-DSS, NIS(D), GDPR, SoX, MiFiD, and ISO 27001, but does not state whether the company itself holds relevant certifications. There is no description of cloud deployment, private deployment, or agent installation; the only specific delivery format mentioned is a one-day-per-month Cyber Breach Response Workshop in London, so it appears better suited to project-based consulting. For management and alerting, the site only references KPI, reporting, metrics, and board-level communication capabilities; there is no sign of real-time monitoring, SOC alerting, or a platform console. Integration capabilities are not disclosed.

Pricing and Ease of Use

The official website does not publish pricing, packages, delivery timelines, or payment methods, so prospective buyers will need to contact them by email before procurement. Ease of use depends on the quality of consulting delivery rather than a product interface. For organizations that already have a security team, interim CISO support, maturity assessments, and tabletop exercises may be relatively easy to implement. However, for customers looking for standardized tools, automated detection, or continuously managed services, the available information is clearly insufficient.

Pros, Cons, and Best Fit

The main advantage is the consultant’s strong background, covering CISO work, government, finance, transportation, cloud security, and board advisory scenarios. The services also align closely with common enterprise pain points, such as incident response playbooks, GDPR/NIS/ISO 27001 compliance, and employee awareness. The downside is that the website feels more like an individual résumé archive, with limited information on team size, SLAs, case methodologies, pricing, or post-engagement support. Cordone is best suited to UK and European organizations that need senior security leadership, board-level communication, a compliance roadmap, or cyber breach exercises.

Access from China and Alternatives

The site does not state anything about access from China, so network reachability, Chinese-language support, local payment options, and China-specific compliance delivery are all unknown. If procuring from mainland China, it is advisable to confirm remote meeting arrangements, contract payment methods, cross-border data handling, and language support in advance. Alternatives may include Deloitte, KPMG, PwC, EY, NCC Group, and Mandiant; within China, security consulting and incident response services from Qi An Xin, NSFOCUS, Venustech, and DBAPPSecurity may also be worth evaluating.