Technology Strategy & Architecture
Define target architecture, investment priorities and a practical modernisation roadmap.
Technology & Data
Cyber & Information Security
Strengthen security across technology, access and business change.
Overview
What this means for your business.
Security requirements change as organisations introduce platforms, integrate systems, engage providers and develop new services.
Capmark helps clients improve cyber and information-security operating models, governance, identity and access, architecture and control implementation.
We work with security, technology and business teams to address current requirements and integrate security into transformation, migration and remediation work.
What we do
The expertise we bring.
We define how security is run: which risks the institution carries, who owns them, which controls discharge them and how those controls are evidenced. The model covers security, technology and business teams.
We design joiner, mover and leaver processes, privileged access, role design and recertification around what people need to do their jobs. Accumulated access is cleared and ownership is made explicit.
We design security architecture for the estate you actually run: network segmentation, data protection, secure integration, cloud patterns and standards delivery teams can apply.
We design and implement controls across detection, response, backup and recovery, configuration, vulnerability management and monitoring. Control descriptions match what actually operates, so testing and attestation rest on the real estate.
We group findings by underlying cause, remediate the cause, evidence the fix in operation and support closure so issues do not recur.
Every migration, integration and new platform changes the security position. We build access models, data handling, control coverage and security evidence into delivery from the start.
What to expect
A team shaped around the work.
A Principal leads from day one. The first weeks establish which controls exist, which operate, where access has accumulated and which findings remain open in practice.
We then build a prioritised remediation and delivery plan, run working sessions with security, technology and business owners, and report position and progress plainly.
Engagements range from targeted security uplift to full remediation and security-by-design support for major change.
01
Assess
Establish the current state, the constraints, the risks and the value at stake.
02
Define
Shape the target model and the business case with the executives who own the outcome.
03
Mobilise
Stand up the team, the plan and the governance around the outcome.
04
Implement
Design, build and test the change, with the business alongside.
05
Sustain
Cutover, hypercare and handover, so the business runs it under its own control.
The same five stages on every engagement, led by senior practitioners end to end. How we work
Client result
Relevant client experience.
Superannuation & Pensions
Calypso platform delivery for a major superannuation fund
A Major Australian Superannuation Fund · Liquidity & Treasury Management
We helped implement Calypso for liquidity and treasury operations across the UK and Australia, including trading workflows, venue integration, middle-office design and regulatory reporting. The programme also internalised externally managed portfolios, transitioning mandates and books onto the in-house investment platform and operating model.
- A$10bn
- Portfolios internalised
- A$20m
- Programme budget led
- 2 jurisdictions
- Delivered live across the UK and Australia
- Calypso
- Front-to-back treasury platform delivered
Read the case study
Insights
Related perspectives.
Get in touch
Discuss Cyber & Information Security.
Tell us what you are working through and the expertise you need.