We believe information security works best when people understand it.
We believe information security works best when people understand it and can relate it to their specific role and responsibilities. Other security consultancies will only talk to your IT team. We talk to your whole organisation because we know that's where real security culture is built.
As a people-focused consultancy we believe the best defence against increasing security threats and compliance requirements isn't better software but better-informed people. Our service combines clear communication, actionable advice, and proportionate controls. This means you can improve your information security and data protection without slowing business delivery.
We've seen the impact of people treated as a barrier, not a solution, to information security. A culture where people can't ask "the stupid questions", and where there's little communication, leaves many organisations exposed to security threats. This reduces trust and confidence in security teams, leaving you at greater risk of a security or data breach.
That's why we founded Relatable Security in 2024. Our mission is to make information security understandable, relatable and achievable for the organisations that need it most. By speaking plain English, removing the jargon, and treating people as the solution to information security, we help businesses build security cultures that actually last.
Information security should always be relatable. For everyone.
Co-founder
Melissa helps organisations deliver transformation with confidence, focusing on culture, leadership, and practical execution. Alongside over 20 years of experience in this field, Melissa is also a certified ISO 27001 lead auditor, Lean Six Sigma Green Belt, and holds a certificate in Agile Coaching.
Read more about Melissa's experience
Co-founder
Kit specialises in secure engineering, information governance, and practical risk reduction grounded in real-world delivery. Using his 20+ years of experience in security governance, Kit is a certified ISO 27001 Lead Auditor and Certified Information Security Manager (CISM).
Read more about Kit's experienceWe see the greatest need for relatable security advice among start-ups, small businesses, smaller healthcare providers, and voluntary organisations. Often there isn't a dedicated information security person, with responsibility falling to someone without the relevant expertise and experience.
This creates pressure and risk for organisations that can leave you feeling confused about what the best course of action is. That's why we always approach our work with you with the following three core principles in mind.
Our qualifications and extensive experience, combined with a refreshingly straightforward approach to explaining information security, are what our clients most value.
As a result of their thoroughness and in depth knowledge of all things ISO, not only did we receive the certification, but more importantly, genuinely improved our information security, processes and procedures, bringing long term value to the business. They also ran the internal audit, with even the external auditors commenting on how thorough and valuable it was. They were a pleasure to work with and I would not hesitate to recommend their services.
Mel and Kit were invaluable in ensuring that we passed the audit and received their ISO 27001 certification at the first time of asking. They clearly explained the whole process, with timelines to ensure that we could plan time and budgets accordingly. They provided detailed advice at every stage, were hands on when needed, but ensured that we transitioned to self sufficiency through the process so there was no long term dependency created.
We will help you and your organisation improve security outcomes without unnecessary complexity.