What this document is — and isn't. This page covers your use of csisc.uk and its free tools (including the Board Assurance Score), and gives a plain-English overview of how a CSISC engagement typically works. It is not the contract that governs any paid consultancy engagement — that's a separate, specific written agreement (a Statement of Work or Master Services Agreement) that we agree directly with you, in writing, before any chargeable work begins.
This document was drafted as a starting point and has not been reviewed by a solicitor. We'd strongly recommend having both this page and your actual client engagement contracts drafted or reviewed by a solicitor before relying on them — the two are different documents serving different purposes, and the real liability exposure sits in the latter.
1. Who we are
CSISC ("we", "us", "our") is a UK-based cybersecurity consultancy providing Executive Cyber Leadership, trading as CSISC — Cyber Strategies & Information Security Consultants, at csisc.uk.
2. Using this website
- You're welcome to browse this site and use our free tools, including the Board Assurance Score, for your own information and evaluation.
- Content on this site — including our Command Model™ methodology, the Board Assurance Score™, our written content, and our branding — is our intellectual property and may not be copied, reproduced, or reused without our written permission.
- You must not use this site in any way that could damage, disable, or impair it, or interfere with anyone else's ability to use it.
3. The Board Assurance Score tool
- The Board Assurance Score is a free, self-assessment tool intended to give general, indicative insight into an organisation's cyber security governance maturity.
- It's based entirely on your own answers. We don't verify or audit them, and the result is not a formal risk assessment, professional advice, certification, or any form of assurance or guarantee.
- Your results shouldn't be relied on as a substitute for a proper assessment carried out by a qualified professional, and decisions about your organisation's security posture shouldn't be based on this tool alone.
- We provide the tool "as is," without warranty, and to the fullest extent the law allows, we exclude liability for any loss arising from relying on it.
4. Enquiries and discovery calls
- Contacting us, booking a discovery call, or submitting the contact form doesn't create a contract or any obligation on either side.
- Any proposal we send following a discovery call isn't binding until both parties agree to it and sign a formal engagement contract.
5. How paid engagements actually work
Any chargeable work — an advisory retainer, a fractional or project-based engagement, or any other paid service — is governed by a separate written agreement, agreed directly with you. That agreement sets out scope, deliverables, fees, liability, confidentiality, intellectual property, and any other terms specific to that engagement.
Nothing on this website forms part of, or overrides, the terms of any signed engagement contract.
6. General website content isn't professional advice
Information on this website — including our Services, Framework, and FAQ pages — is provided for general information only, and doesn't constitute professional cyber security, legal, or compliance advice specific to your organisation. Formal advice is only given as part of a scoped, paid engagement.
7. Limitation of liability
To the fullest extent the law allows, CSISC excludes liability for any loss or damage arising from your use of this website or its free tools — except where liability can't legally be excluded, such as for death or personal injury caused by negligence, or for fraud.
This limitation doesn't apply to, and doesn't override, liability arising under a separately signed engagement contract — that contract sets out its own liability terms.
8. Confidentiality
We treat information you share with us — including via the contact form or a discovery call — as confidential, and use it only as described in our Privacy Policy. Confidentiality obligations relating to any paid engagement are set out in that engagement's own contract.
9. Governing law
These terms are governed by the laws of England and Wales, and any disputes relating to them are subject to the exclusive jurisdiction of the courts of England and Wales.
10. Changes to these terms
We may update these terms from time to time. The date at the top shows when they were last revised.
11. Contact us
CSISC
Email: info@csisc.uk
Phone: +44 (0)74 1265 8173
United Kingdom
Registered company details to be added here once finalised — see the general note about placeholder contact details elsewhere on this site.