A major UK-listed housebuilder engaged AnotherDay to conduct a return cyber risk assessment, revisiting an engagement completed several years prior. As a large, complex business operating across multiple sites and supply chains, the client recognised the importance of benchmarking the evolution of their cyber security posture and ensuring their insurance arrangements remained appropriately calibrated to their risk profile.

Having worked with AnotherDay previously, the client sought to understand how their controls had matured, where gaps remained, and how their current posture would be received by the cyber insurance market in what had become a notably softer pricing environment.

The Process

AnotherDay's specialist cyber consulting team conducted a comprehensive cyber risk assessment and exposure analysis, structured to reflect both the scale and complexity of the client's operations and the years of change since the original engagement.

Working across the business, our consultants engaged key stakeholders in IT, risk, and senior leadership to build a detailed picture of the client's current security controls, operational environment, and areas of residual exposure. The assessment was calibrated against current insurer expectations and market benchmarks, enabling the client to understand precisely how their posture would be interpreted by underwriters.

Concurrently, AnotherDay designed and delivered a bespoke tabletop exercise for the client's senior leadership and IT management teams. Built around a realistic and sector-relevant incident scenario, the exercise was intended not as a test to be passed, but as a collaborative process to stress-test existing response capabilities and surface practical opportunities for improvement.

The Result

The reassessment revealed meaningful progress in the client's cyber security controls since AnotherDay's previous engagement - a reflection of the client's investment in its security posture over the intervening years. This improved position translated directly into commercial benefit, with the client achieving a substantial reduction in their cyber insurance premium, even within an already softening market.

The tabletop exercise generated a series of targeted recommendations to sharpen the client's cyber incident response processes. Notably, it also surfaced opportunities to better align cyber response with the client's broader crisis management and business continuity capabilities - an area of increasing focus for organisations operating at this scale.