Independent, expert advice for business leaders on cyber risk
We provide insight and practical advice to help business leaders understand, and effectively manage, the cyber risks facing their organisations, and to help investors identify and capture opportunities around cyber security
Our firm
Bridge Place Cyber was established in 2024 to provide independent, expert advice on cyber risk. Our firm was founded by former partners from Hakluyt, who had spent the previous decade advising on cyber risk as an integrated leadership, management, and technical issue. Our clients include executive leadership teams and boards in corporates across every sector internationally. We also work with the top private equity firms in the world by assets under management and the most respected pension funds and family offices.
We are differentiated by:
Expertise
The expertise of our team – combining experience at the highest levels in government service and enterprise cyber risk management, underpinned by privileged insight into developments in the cyber threat environment.
Independence
Our independence – we do not sell solutions or represent any vendors, and our advice is therefore completely impartial.
Approach
Our approach to cyber risk as an integrated leadership, management and technical issue, and our specific focus on serving the needs of the C-suite and board.
Our services
We advise on a wide range of digital and cyber issues. All of our work is bespoke and designed to meet the specific needs of our clients. Our services include:
Strategic advice
Cyber risk – Strategic reviews of our clients’ approach to cyber risk management to assess the extent to which their strategies, people, processes and technology are fit for purpose, and to identify and prioritise opportunities for improvement.
Focused issues – Specialist advice on specific challenges such as insider risk and disinformation risk, including helping our clients understand the nature of the risks they face, the likelihood and potential impact, and how best to mitigate them.
Acquisition and opportunity diligence – Advice on the acquisition and growth of cyber-related businesses, and due diligence on cyber risk and mitigation strategies associated with acquisitions and integration plans.
Crisis readiness – Reviews of our clients’ readiness to respond to a major cyber crisis by examining current plans and processes and designing and running simulation exercises to test and improve cyber preparedness.
Ongoing advice
Retained support – Providing an independent sounding board and ongoing insights on the evolving cyber risk and regulatory environments. Advising our clients on the implications of their approach to managing cyber risk in its geopolitical context.
Programme assurance – Constructively challenging strategies, plans, and implementation programmes, to provide ongoing assurance that investments in cyber risk management remain proportionate for our clients’ situations.
Portfolio support – Supporting financial sponsors on the cyber risks in their portfolios. Assessing where risk exposure is greatest, identifying and prioritising opportunities to enhance resilience, and helping enhance cyber risk governance across portfolios.
Crisis counsel – Providing discreet counsel to executive leadership and crisis management teams during major cyber-related crises to enable clear decision-making and to minimise the impact of the incident.
Advisory board
-
Andrew France OBE
Andrew is the former Deputy Director for Cyber Defence Operations at GCHQ. During his 30-year career with the agency, Andrew was instrumental in formulating the UK’s national cyber defence strategy, with responsibility for both policy and operational delivery. After leaving GCHQ in 2014, Andrew was the co-founder and CEO of the leading cyber security technology company, Darktrace. Andrew was also a founding member of Hakluyt’s digital and cyber practice. -
Sir Iain Lobban KCMG CB
Sir Iain served as the Director of GCHQ, the largest UK security and intelligence agency, from 2008 to 2014. A thirty-year intelligence veteran, his leadership spanned counter terrorism, cyber defence, support to military campaigns, and the prevention and detection of serious crime. He spearheaded the execution of the UK’s first two national cyber security strategies. Since moving to a portfolio career in the private sector, Iain has worked closely with Chris and Jeremy for several years, advising senior clients on cyber and broader digital risk. -
The Honorable John C. (Chris) Inglis
Chris has a distinguished career across the US military and government. He served in the White House from 2021 to 2023 as the inaugural U.S. National Cyber Director, and in this role he led work on President Joe Biden’s National Cybersecurity Strategy. Prior to this he was a Commissioner on the U.S. Cyberspace Solarium Commission, spent eight years as the Deputy Director and Chief Operating Officer of the National Security Agency, and three years as the Special U.S. Liaison to London.
Our team
-
Dr Chris Dilloway
PARTNER
After completing a DPhil in information security at Oxford University, Chris has spent the last 16 years advising senior clients on the management of cyber risk – both as a strategic business issue and at the operational level. Prior to Bridge Place Cyber, he was a partner in Hakluyt’s digital and cyber practice where he spent eight years developing the business. Before that, he spent eight years with Deloitte’s security practice in the UK. He has led the development of strategies for managing cyber risk for corporations and financial sponsors.
-
Jeremy Wood
PARTNER
Jeremy has spent the last 20 years advising clients on the management of cyber risk, specialising in risk mitigation, and cyber strategy definition and implementation. He has an MSc in information security from Royal Holloway and has received top-level professional certification from the UK National Cyber Security Centre. Prior to Bridge Place Cyber, he was a partner in Hakluyt’s digital and cyber practice where he spent seven years developing the business. Before that, he spent ten years with Deloitte’s security practice in the UK.
-
Luke White
CONSULTANT
Luke has spent the last 15 years advising corporate clients on strategic cyber risk management. His experience includes helping clients respond to cyber events, transforming cyber capabilities, and fulfilling various client management roles, including as Chief Information Security Officer at a global manufacturing business. Prior to Bridge Place Cyber, Luke was an executive at Hakluyt, and before that, a director in Deloitte’s cyber practice in the UK.
-
Peter Munford
CONSULTANT
Peter is an adviser on complex security and resilience topics. He has a background as an executive at Hakluyt, and as a career diplomat and operational officer in GCHQ and the UK Foreign, Commonwealth and Development Office. During his government career, he negotiated on cyber security at the United Nations, worked on security issues around the Middle East, and led a team in the UK National Cyber Security Centre assessing the threats from emerging technologies.
-
Steve Glynn
CONSULTANT
Steve is based in Australia and leads an independent cyber risk advisory business in the region. Before this, he was a partner in Hakluyt’s digital and cyber practice where he spent six years developing the Asia-Pacific business. Prior to joining Hakluyt, Steve was the global Chief Information Security Officer of the Australia and New Zealand (ANZ) Banking Group, and he has also held technology and cyber security leadership positions at the Royal Bank of Scotland and ABN Amro.