Information & cyber security, privacy, and AI governance consultancy
It's time to secure your business
Helping organisations overcome
information & cyber security, privacy, and AI compliance challenges
Understand your risks
Pragmatic information risk assessments that show you where your real exposures are, so you can focus effort and budget where it matters most.
Achieve compliance
Practical support to implement, certify, and comply with ISO/IEC 27001, ISO/IEC 27701, ISO 22301, ISO/IEC 42001, Cyber Essentials, NCSC CAF, NIST CSF, CyFun, and TISAX, and with regulations such as NIS2, DORA, and GDPR.
Stay secure
Independent internal and supplier audits and ongoing advice that keep your controls effective and your organisation resilient as it grows.
AI governance: ISO 42001 & NIST AI RMF
AI brings real opportunity, and new risks. Customers, investors, and regulators increasingly expect proof that your AI is governed responsibly.
We now offer independent consulting and auditing against ISO/IEC 42001, the international standard for AI management systems, and the NIST AI Risk Management Framework, so you can adopt AI with confidence and demonstrate trustworthy AI to the people who matter.
Our services
Independent, pragmatic advice since 2010
Taylor Baines Ltd is an independent consultancy providing pragmatic consulting and auditing in information & cyber security, privacy, and AI governance, tailored to the needs of your organisation.
We give business-focused, unbiased advice, with a personal, trusted service that meets your business needs and not any other agenda.
Don’t do security.
Do business securely.
Our goal is to help you solve your information & cyber security, privacy, and AI governance challenges, and to become your trusted adviser in these fields.
We deliver quality, cost-effective advice aligned to industry best practice and to your organisation’s business strategy, so that security and the responsible use of AI enable your business rather than getting in its way.
Why choose us?
Solid experience
Established in 2010 by Simon Taylor, a highly experienced information security professional with specialist skills in security and assurance standards, governance, and risk management.
Independent & unbiased
We have no products to sell and no other agenda. Our advice is based on the fundamental principles of information security and what is right for your business.
Pragmatic & ethical
Practical, proportionate advice delivered professionally and ethically, with a focus on real benefit to your organisation and your customers.
Our latest insights
Threats, vulnerabilities, and legal, standards, and AI updates, delivered free every Monday.
Get our weekly insights by email
Threat and vulnerability round-up: week ending 25 October 2026
Exploited PHP2Shell flaws in PHP, an Arista VeloCloud Orchestrator zero-day, and a chained Plex Media Server attack lead this week, alongside backdoored WordPress sites via stolen UpdraftCentral keys and a joint warning on SafePay ransomware.
UK proposes up to 14 years in prison for subsea cable sabotage
A UK government White Paper proposes replacing the Submarine Telegraph Act 1885 with new offences of up to 14 years for damaging subsea cables, plus security duties for operators.
Urgent: Arista VeloCloud Orchestrator vulnerability under active attack
Arista VeloCloud Orchestrator On-Prem flaw CVE-2026-114625 is under active attack: upgrade to a fixed release, restrict access, and check for compromise.