Executive-level cybersecurity leadership, board reporting, strategy, risk oversight and supplier assurance without the cost of a full-time CISO.
Retained advisoryCyber • Risk • Compliance
Board-level cybersecurity and compliance advisory.
Pangolin Advisors helps organisations navigate cyber risk, regulatory change and operational resilience with clear, pragmatic, executive-level guidance.
Virtual CISO
NIS2 Readiness
DORA Advisory
Vendor Assurance
What we do
Experienced guidance for organisations where trust, resilience and regulation matter.
We work with leadership teams, boards and growing businesses that need senior cybersecurity and compliance expertise without unnecessary complexity.
01
Reduce risk
Identify material cyber, supplier and operational risks, then prioritise the actions that matter most.
02
Improve readiness
Prepare for NIS2, DORA, ISO 27001 and board-level assurance through practical programmes.
03
Support growth
Build security and compliance foundations that help win clients, satisfy investors and protect reputation.
Services
Advisory services designed for practical outcomes.
Start with a focused assessment, then progress to retained advisory, compliance transformation or ongoing executive support.
A focused review of your organisation’s cyber posture, key risks and immediate priorities, delivered as a clear executive roadmap.
Fast startAssessment and planning across governance, risk management, incident response, supply-chain security and compliance readiness.
EU regulationPractical support for financial services firms and technology providers affected by digital operational resilience obligations.
Financial servicesIndependent review of suppliers, technology partners and third-party risks against security, resilience and compliance expectations.
Supply chainGap assessments, roadmap planning and programme oversight for organisations implementing or improving an ISMS.
GovernanceWhy Pangolin Advisors
Cybersecurity is a board-level business risk, not just a technical issue.
We focus on clarity, proportionality and business outcomes. No scare tactics. No unnecessary complexity. No jargon-heavy reports that sit unread.
Protection
Like the pangolin, organisations need intelligent layers of defence that adapt to changing threats.
Clarity
We translate technical and regulatory complexity into decisions boards and executives can act on.
Pragmatism
We prioritise proportionate improvements that strengthen resilience without overwhelming the business.
Trusted Advisor
Matthew Apps MSc, CISM
Founder & Principal Advisor
Pangolin Advisors was founded by Matthew Apps, an experienced technology and cybersecurity leader with over 30 years of experience delivering complex programmes, managing risk and advising organisations operating in regulated environments.
Combining executive leadership, financial services expertise and cybersecurity knowledge, Matthew helps boards and leadership teams make confident decisions about cyber risk, compliance and operational resilience.
30+ Years Experience
MSc Cybersecurity
CISM Certified
Financial Services Specialist
Virtual CISO
Board Advisory
Insights
Practical thinking for boards and leadership teams.
Coming soon: executive briefings on cyber readiness, regulatory change, supply-chain risk and AI governance.
NIS2 readiness for mid-market organisations
What leadership teams should prioritise before regulation becomes an urgent problem.
DORA and operational resilience
Lessons from financial services for organisations dependent on technology and third parties.
What boards need to know about cyber risk
A practical guide to asking better questions and demanding clearer evidence.
Vendor assurance and supply-chain security
How to manage third-party risk without creating a bureaucratic monster.
Ready to strengthen your cyber, risk and compliance position?
Book an introductory call to discuss your objectives, regulatory pressures and immediate priorities.