GreyHyphen Labs · Ideas, built between the lines
Cybersecurity strategy · Operating model · Enterprise security architecture · Governance · Sales and solutioning · Service delivery
Frameworks, practitioner guides and tools for cybersecurity consultants, security leaders, and sales and delivery teams — from the first client conversation to board approval and delivery.
Pursuit-to-Delivery Unified Lifecycle for Solution Excellence
An outcome-based operating framework that governs the whole journey from an early lead to an accepted delivery baseline — five Functions, eight decision gates, four maturity tiers and the RACI-VS responsibility model.
Commercial licence · GHL-FW-PULSE-1.0Traceable Risk, Architecture, Capability and Economics
A traceability framework that makes the chain from a business driver to a line of security spend — and back to a measured outcome — the object under management. Ten node classes, ten links, five stages, seven domains and five assurance grades.
Commercial licence · GHL-FW-TRACE-1.0A practitioner's method for building an organisational cybersecurity strategy that a board can approve and the market can bid for.
Five phases — context, assessment, analysis, formulation and roadmap — with phase summaries, how-to-complete checklists, a reproducible prioritisation model, initiative and KPI charters, scopes of work and a quality review.
$169 individual licence
Commercial licence · GHL-PG-STR-1.0A practitioner's method for designing how cybersecurity is directed, controlled and held to account, anchored to ISO/IEC 27014.
Requirements consolidated once, governance bodies with real decision rights, delegation, RACI, interaction maps, procedures, a communication plan and tiered performance measures — traceable from every board report to the procedure behind it.
$169 individual licence
Commercial licence · GHL-PG-GOV-1.0A practitioner's method for designing the cybersecurity function: services, sourcing, organisation, sizing, funding and transition.
Seven components in three bands: a service catalogue and capability model, a scored sourcing decision, demand-based sizing, skills, technology, funding and a transition plan — with a one-page service card for every service.
$249 individual licence
Commercial licence · GHL-PG-TOM-1.0Security architecture · 2 volumes
Puts a business-driven SABSA security architecture into practice — Volume 1 covers the contextual and conceptual layers; Volume 2 the logical, physical and component layers, with ArchiMate design canvases. Buy either volume, or both.
from $169 individual licence
Commercial licence · GHL-GD-SABSA-V1 / V2Unified assurance assessment
A structured workshop companion for cyber, privacy and regulatory assurance — scope the frameworks, assess each control on evidence, agree findings and actions, and export board-ready reports — with AI help at every step from the model you choose.
Licensed per named user · free 14-day pilotDeadlines, owners and on-time reminders
A board for team leads who run the calendar of controls — audit cycles, user access reviews, KPI submissions, policy reviews and renewals — each with an owner, a date and reminders that arrive before it slips.
Individual and team licences · free 14-day demoPULSE governs the journey from an early lead to an accepted delivery baseline, so what is sold is what can be delivered.
TRACE makes every line of security spend trace to a business need — and back to a measured outcome.
SABSA Unlocked takes a security architecture from business requirements to component specifications.
NorthX turns assurance workshops into scored controls, agreed findings and a costed roadmap.
Show the board a strategy and a budget where every line traces to a business need — and keep every review cycle on time.
TRACE · NorthX · DuelineTake a security architecture from business requirements to component specifications.
SABSA UnlockedGovern the journey from early lead to accepted delivery baseline — sell what you can deliver.
PULSERun a strategy, governance or operating model engagement from a method, not a blank page.
Cybersecurity Strategy · Governance Model · Operating ModelDeliver repeatable, evidence-based engagements to clients under a consultancy licence.
All productsA practical five-phase method for a cybersecurity strategy: context, assessment, analysis, formulation and a costed roadmap your board will approve.
Read · 3 minCybersecurity Operating ModelWhat a cybersecurity target operating model is, its seven components, and how to design services, sourcing, sizing and funding that hold together.
Read · 3 minCybersecurity Governance ModelDesign cybersecurity governance that decides: consolidated requirements, decision rights, RACI, policies and measures, aligned to ISO/IEC 27014.
Read · 3 minLicensing
Interested in a licence, a NorthX pilot, a Dueline demo or working together? Tell us a little about your organisation and we will reply within two working days.