The examples below highlight the impact of engagements led by Woodstock Advisory founder Stephen Oke. Across organisations in the private and public sectors, his work has helped organisations understand their security risks, achieve certification, prepare for disruption and turn improvement priorities into practical action.
CASE STUDIES
Assessed an international manufacturing company’s cybersecurity maturity, providing a clearer understanding of its security position and areas requiring attention.
Aligned a fund management company’s policies and standards with Cyber Essentials requirements, establishing a clear foundation for implementing the required security controls.
Established security roles and responsibilities across an agricultural organisation, clarifying accountability and laying the foundation for consistent security governance.
Oversaw a multinational tabletop incident response exercise for a utility company, testing coordination across countries and strengthening preparation for a real incident.
Served as interim application security manager for an automotive firm, providing security leadership and supporting risk-aware development practices.
Led recovery from a significant infrastructure incident as incident response manager, keeping the pensions business operating throughout the disruption.
Led teams of third-party risk management analysts for an airline group, supporting informed decisions about supplier security risks and assurance priorities.
Established a risk metrics framework for a London financial institution, creating a consistent basis for tracking risk and informing management decisions.
Conducted multi-site security reviews for a financial services company, providing visibility of local security arrangements to support oversight and improvement planning.
Mapped a financial institution’s security arrangements against DORA requirements, supporting its preparation for regulatory approval applications.
Developed a threat and risk framework for a university, providing a structured basis for assessing threats and prioritising risk management actions.
Led a SaaS vendor to a successfully completed SOC 2 Type II certification, demonstrating its controls through independent assurance and supporting customer confidence.
Led multiple large-scale public sector security programmes, translating security objectives into coordinated delivery across complex organisations.
Delivered GDPR training and awareness activities, helping staff understand their responsibilities for handling and protecting personal data.
Established a NIST-based security control set for an automotive manufacturer and led annual assessments and improvement exercises, creating a repeatable approach to assessing maturity and directing security improvements.
Delivered data centre migrations and business continuity exercises, testing the ability of a telecommunications operator to maintain or recover services during disruption.
Managed information security management systems for a telecoms operator through multiple ISO 27001 audits, maintaining structured governance and enabling independent scrutiny of security controls.
Led an investment bank’s operational network security team, overseeing the day-to-day operation and maintenance of network security controls.
Deployed customer-facing web application firewalls for a European bank, establishing a protective security layer across its customer-facing web applications.