Emerging threats

We support organisations striving to build a trustworthy, safe online environment where users can engage authentically in their communities.
Commercial organisationsWe support commercial organisations operating in a digital world, seeking to protect their reputation and prevent business disruption caused by cyber attacks and compliance breaches.
International programmes and developmentWe support international government organisations and NGOs working to provide infrastructure or improve the capabilities, security and resilience of their nation.
UK government and public sectorWe support UK government organisations responsible for safeguarding critical infrastructure, preserving public trust, and maintaining national security.



A major UK financial services organisation needed to scale its third-party supplier due diligence programme to keep pace with a growing supplier portfolio.
With a large number of suppliers requiring review and limited specialist capacity in-house, the organisation sought a specialist partner who could deliver rigorous assessments at pace — working within their existing tools, processes and compliance framework.
This case study outlines how PGI embedded within the client's environment to more than double their monthly assessment completion rate — and what we found along the way about the systemic risks hiding across their supplier base.
For the methodology, findings, and practical recommendations for maturing your own third-party risk programme:

The current approach to AI in defensive security is becoming an unwinnable race. Attackers use AI to find and exploit weaknesses faster, so defenders use AI to find and fix them faster – at the cost of the long-term planning that would change the odds.

It didn’t take long for organisations of all types and sizes to embed AI into their critical operations and products (enter the cliché about efficiency).

We’ve all spent a lot on cyber security tools, monitoring platforms and threat intelligence capabilities over the last decade, so why do so many enterprises continue to experience cyber attacks and breaches? And often because of well-known and entirely preventable vulnerabilities and misconfigurations.