Emerging threats

We support organisations striving to build a trustworthy, safe online environment where users can engage authentically in their communities.
Commercial organisationsWe support commercial organisations operating in a digital world, seeking to protect their reputation and prevent business disruption caused by cyber attacks and compliance breaches.
International programmes and developmentWe support international government organisations and NGOs working to provide infrastructure or improve the capabilities, security and resilience of their nation.
UK government and public sectorWe support UK government organisations responsible for safeguarding critical infrastructure, preserving public trust, and maintaining national security.



A major UK financial services organisation needed to scale its third-party supplier due diligence programme to keep pace with a growing supplier portfolio.
With a large number of suppliers requiring review and limited specialist capacity in-house, the organisation sought a specialist partner who could deliver rigorous assessments at pace — working within their existing tools, processes and compliance framework.
This case study outlines how PGI embedded within the client's environment to more than double their monthly assessment completion rate — and what we found along the way about the systemic risks hiding across their supplier base.
For the methodology, findings, and practical recommendations for maturing your own third-party risk programme:

HMRC has just signed a £175 million, ten-year contract with Quantexa, a UK-based data, analytics and AI software company.

Many organisations invest heavily in ISO 27001 and PCI DSS year after year — but few realise they may be paying for a scope that is larger, more complex, and more expensive than necessary.

The UK Ministry of Defence (MoD) recently introduced the Defence Cyber Certification (DCC) Scheme: a framework for suppliers in the defence supply chain.