About

Tanner Bridge was set up in 2019 by four engineers who had spent long enough inside large estates to know where the documentation stops being true.

How we work

Every engagement starts with the same question: what decision does this work have to support? Reviews are short and evidence-based. We would rather report ten findings we can demonstrate than fifty we cannot.

We keep the team small on purpose. The person who runs the review writes the report. There is no delivery centre, no junior bench, and no subcontracted analysis we would not put our name to.

Where we are

Registered in the Isle of Man, working across the UK, Ireland, Luxembourg and the Netherlands. Most engagements are run on site for the first week and remotely thereafter.

Standards we work to

• ISO/IEC 27001:2022 — lead auditor certified
• ISACA CISA and CRISC — two of four partners
• PRINCE2 and MSP for transition and exit programmes

We are not a penetration testing provider and do not perform offensive security work. Where an engagement needs one, we help the client scope it and review the resulting report.