About Us
About Steve Jump & Custodiet Advisory Services
Translating Cyber Risk Into Business Language Since 1998
Steve Jump is a chartered engineer with an uncommon talent: the ability to make complex cybersecurity concepts accessible, actionable, and relevant to business leaders.
With over 25 years of information security experience—including a decade running his own security businesses—Steve understands cybersecurity from both technical and business perspectives. This dual expertise enables him to bridge the communication gap that often leaves boards uncertain and security teams frustrated.
The Problem We Solve
Most organizations treat cybersecurity as a technology problem managed by IT departments. This approach creates three critical failures:
Communication
Breakdown
Security teams struggle to articulate risk in business terms; executives struggle to make informed security investment decisions.
Misaligned
Priorities
Without business context, security efforts focus on compliance rather than actual threat reduction.
Ineffective
Investment
Security budgets get allocated based on industry trends rather than specific business risk.
Proven Track Record
Experience
Businesses
International Speaker
Conferences
Published
Expert
In leading Industry
Publications
Our Approach: Four Pillars
1. Asset Identification & Valuation
You can’t protect what you don’t understand. We help you identify critical business assets and quantify their value—not just in financial terms, but in operational impact and strategic importance.
Methodology:
- Business process mapping
- Digital asset inventory
- Dependency analysis
- Financial impact modelling
2. Quantitative Risk Assessment
Move beyond traffic light matrices and compliance scores. We use quantitative risk analysis to provide business-meaningful metrics.
Methodology:
- FAIR (Factor Analysis of Information Risk) framework
- Monte Carlo simulation for probability distribution
- Financial exposure calculation
- Risk-adjusted return on security investment (ROSI)
3. Compliance as Risk Management Tool
Compliance frameworks (ISO 27001, NIST, CIS Controls) are valuable—when used properly. We help you leverage compliance tools to manage actual risk, not just check boxes.
Approach:
- Map compliance requirements to business risks
- Identify compliance gaps with real business impact
- Prioritize remediation based on risk reduction
- Optimize compliance investment for maximum protection
4. AI-Enhanced Threat Intelligence
Artificial intelligence transforms threat detection and risk assessment. We help you leverage AI tools effectively while understanding their limitations.
Capabilities:
- AI-powered vulnerability assessment
- Predictive threat modeling
- Automated risk scoring
- Machine learning for anomaly detection
Who We Serve
1. CEOs & Business Executives
Get clear, actionable cyber risk information that supports strategic decision-making. Understand how security investments protect business value.
Boards & Audit Committees
Receive concise, business-focused cyber risk reporting that enables effective governance and oversight.
2. CISOs & Security Leaders
Gain coaching on communicating risk to business stakeholders, building business cases for security investment, and aligning security strategy with business objectives.
3. CIOs & Technology Leaders
Understand how to integrate security into digital transformation initiatives and build security teams that support business growth.
4. Growing Organizations
Access CISO-level expertise without full-time executive cost through Virtual CISO services tailored to your stage and needs.
Quis custodiet ipsos custodes? – Who guards the guardians themselves?
Ready to Transform Your Approach to Cyber Risk?
Whether you’re a CEO seeking board-level risk insights, a CISO building a business case for security investment, or a business leader navigating digital transformation, Custodiet Advisory provides the expertise and perspective you need.