Information & cyber security, privacy, and AI governance consultancy
It's time to secure your business
Helping organisations overcome
information & cyber security, privacy, and AI compliance challenges
Understand your risks
Pragmatic information risk assessments that show you where your real exposures are, so you can focus effort and budget where it matters most.
Achieve compliance
Practical support to implement, certify, and comply with ISO/IEC 27001, ISO/IEC 27701, ISO 22301, ISO/IEC 42001, Cyber Essentials, NCSC CAF, NIST CSF, CyFun, and TISAX, and with regulations such as NIS2, DORA, and GDPR.
Stay secure
Independent internal and supplier audits and ongoing advice that keep your controls effective and your organisation resilient as it grows.
AI governance: ISO 42001 & NIST AI RMF
AI brings real opportunity, and new risks. Customers, investors, and regulators increasingly expect proof that your AI is governed responsibly.
We now offer independent consulting and auditing against ISO/IEC 42001, the international standard for AI management systems, and the NIST AI Risk Management Framework, so you can adopt AI with confidence and demonstrate trustworthy AI to the people who matter.
Our services
Independent, pragmatic advice since 2010
Taylor Baines Ltd is an independent consultancy providing pragmatic consulting and auditing in information & cyber security, privacy, and AI governance, tailored to the needs of your organisation.
We give business-focused, unbiased advice, with a personal, trusted service that meets your business needs and not any other agenda.
Don’t do security.
Do business securely.
Our goal is to help you solve your information & cyber security, privacy, and AI governance challenges, and to become your trusted adviser in these fields.
We deliver quality, cost-effective advice aligned to industry best practice and to your organisation’s business strategy, so that security and the responsible use of AI enable your business rather than getting in its way.
Why choose us?
Solid experience
Established in 2010 by Simon Taylor, a highly experienced information security professional with specialist skills in security and assurance standards, governance, and risk management.
Independent & unbiased
We have no products to sell and no other agenda. Our advice is based on the fundamental principles of information security and what is right for your business.
Pragmatic & ethical
Practical, proportionate advice delivered professionally and ethically, with a focus on real benefit to your organisation and your customers.
Our latest insights
Threats, vulnerabilities, and legal, standards, and AI updates, delivered free every Monday.
Get our weekly insights by email
Threat and vulnerability round-up: week ending 4 October 2026
Citrix patches another exploited NetScaler flaw, FortiMail and Zammad zero-days are in KEV, and Star Blizzard and Warlock ransomware campaigns hit UK and European targets.
Hackers steal data of nearly 3 million people from Pentagon HR system
The Pentagon’s Defense Manpower Data Center says attackers exploited a file-sharing flaw and stole personal data of over 3 million people between October 2025 and July 2026.
Connecticut privacy law amendments take effect
Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.