Frequently Asked Questions

Phenomlab is a senior leadership practice providing Fractional and Interim CISO and CIO services. It is designed to bridge the gap between engineering reality and board-level accountability. I provide a Senior Asset - direct, practitioner-led ownership for organisations where technology and security decisions carry material commercial weight.

Traditional consultancies rely on a "leveraged model": a senior partner sells the work, and a junior associate executes it. This creates translation layers and billable bloat. Phenomlab has no layers. You work directly with a leader who has 30 years of experience, including FCA Material Risk accountability. You pay for the brain, not the agency's office rent.

I move beyond advisory. Advice is easy; ownership is difficult. As an Fractional and Interim CIO or CISO, I operate within your leadership team to make and execute decisions. I retain direct architectural practice, meaning I can discuss VPC peering with your engineers and DORA compliance with your board in the same hour.

Typically, I am engaged by high-growth SMEs or regulated financial firms facing a "pivot point", such as an audit failure or a leadership transition. These are the contexts where these frequently asked questions about ownership and discipline are most relevant.

Traditional consultancies rely on a "leveraged model": a senior partner sells the work, and a junior associate executes it. This creates translation layers and billable bloat. Phenomlab has no layers. You work directly with a leader who has 30 years of experience, including FCA Material Risk accountability. You pay for the brain, not the agency's office rent.

Yes. Every engagement is founder-led. You are deploying a specific Senior Asset - Mark Cutting. There is no "hand-off" to a junior team once the contract is signed.

If you are looking for "compliance theatre" - a tick-box exercise to satisfy a basic requirement without actually improving your security posture - I am not the right choice. I am also not a fit for organisations looking for a "yes man" to validate existing technical debt. I prioritise Commercial Integrity and defensible results over comfort.

This is one of the most frequently asked questions regarding capital efficiency.

Engagements are flexible and calibrated to your actual risk.

A typical Fractional CISO engagement ranges from one to four days per month, while (for example) Interim CIO roles may require a higher initial "burst" of activity to stabilise a department. The model is designed to expand and contract with your road map.

We start with a Diagnostic Call. I don't provide a generic sales pitch; I listen to your current friction points - where decisions are stuck, where ownership is fragmented, and where the "inaction tax" is mounting. If there is a fit, I provide a clear path to accountability.

By an order of magnitude.

This is another one of the most frequently asked questions regarding bottom-line cost.

You gain the experience of a £200k+ executive for a fraction of the cost, with none of the permanent overhead, recruitment fees, or long-term contractual friction. It is the most capital-efficient way to stabilize a scaling organisation.