How to use this page
Start with the category links, or use the search box below to jump to a specific question. Tap any question to expand the answer.
Fit & availability
Which countries do you work with?
I work with clients internationally including the US, UK, Hong Kong and Saudi Arabia.
Can you handle timezone differences?
Yes, I'm accustomed to working with teams from different time zones.
Can you work with US-based teams across different time zones?
Yes. Delivery is remote, and engagements can be organised around suitable overlap between US and European time zones. Communication expectations, meeting times, and response windows are agreed during scoping.
Process & delivery
How do we ensure the project is completed on time?
We agree on clear project milestones and deadlines before starting the work. Regular progress updates are shared throughout the process, and if any delays are anticipated, I’ll notify you well in advance.
What happens if the project requirements change mid-way?
If the scope changes, I will provide an updated estimate of the time and cost required. We can amend milestones accordingly, and any new requirements will be added to the escrow agreement for clarity.
How do you ensure the quality of the work?
We ensure quality through rigorous processes, peer reviews, compliance checklists, and client feedback loops. Every deliverable passes a final quality gate before handover.
What happens if the project takes longer than expected?
We set realistic timelines and define milestones upfront. If delays are foreseen, I communicate this early and work with you to adjust timelines or expectations. If the delay is caused by me, I make it a priority to complete the work as soon as possible.
How do we communicate during the project?
I prefer open communication through your preferred channel, whether that's email, Slack, or project management tools like Trello or Jira. Regular check-ins and progress updates can be scheduled to keep you informed.
How long does an AWS security engagement take?
Timing depends on the number of AWS accounts, workloads, regions, and stakeholder availability. The proposed timeline, milestones, and client responsibilities are included in the written scope before work begins.
What happens after I book a call?
We discuss your AWS environment, main concern, desired outcome, and target timeline. If there is a fit, you receive written scope, assumptions, deliverables, timeline, and price before any work begins.
Commercial terms
How do you charge for the project?
Prices are mentioned in the pricing page. We can also agree on payments released through escrow as key deliverables are completed.
What is escrow and how does it work?
Escrow is a secure payment method where the client funds a project in advance, but the money is held by a third party until agreed-upon milestones or the final project is completed. This protects both parties.
Do you offer support after the project is completed?
Yes, I offer post-project support. Ongoing support can be arranged on a retainer basis or as an hourly rate for any additional work that arises after the project is finished.
Can I terminate the project early?
Yes, if you need to terminate the project early, we can do so. Completed work will be delivered, and payment will be made for the milestones that have been met.
Does the price include remediation?
The audit includes findings, recommendations, and a stakeholder readout. Hands-on remediation is available through the End-to-End Security Programme or a separately scoped follow-on engagement.
Are AWS charges or third-party tools included?
No. AWS, software, testing, and third-party service charges are separate unless they are explicitly included in the written scope.
Risk & protection
What happens if there is a dispute over the work completed?
If a dispute arises, both parties can present their case to the escrow service or a neutral mediator, if applicable. Funds remain held until the issue is resolved, ensuring fair treatment.
How do you handle intellectual property and confidentiality?
I respect your privacy and the confidentiality of your project. Any intellectual property created during the collaboration will be transferred to you once the project is complete and payment has been made. I’m happy to sign an NDA if necessary.
What if I’m not satisfied with the work?
Your satisfaction is my priority. If you're not happy with the work, we can discuss your concerns, make revisions, or clarify misunderstandings. If the issue cannot be resolved, funds in escrow will be returned to you according to the agreement terms.
Are your services insured?
Yes, all services are covered by Professional Indemnity (PI) insurance with Hiscox, up to £2M GBP. This protects against cyber incidents resulting from errors or omissions.
Do you need administrator access to assess my AWS environment?
No. Read-only, least-privilege access is the default for assessment work. Write access is discussed and approved separately if remediation or implementation work is requested.
Will you make changes directly in production?
Not during a standard assessment. The default approach is a read-only review. Any implementation or remediation work is separately agreed and performed only with your approval and an appropriate change-control process.
How do you handle AWS credentials and client data?
Access is limited to the agreed scope and handled using least-privilege principles. Client information is used only for the agreed engagement, and production changes are not made without approval.
Need more detail?
If your question is not covered here, you can use the chat widget for a quick conversation or send a message through the contact form.
Prefer a direct conversation?
Use the chat widget if it is enabled in your browser, or contact me by email for more context before committing.