Hi, I'm Doug from DRJ-Consulting 

Security Philosophy

“Security must be practical, proportionate, and pervasive. It should enable operations, not obstruct them.”

I believe in real-world, operational security — not just compliance for its own sake. Systems must be accreditable, advice must be actionable, and policy development must be fit-for-purpose, aligning with business objectives and risk appetite.

Rigorous threat and risk analysis is the foundation for decision-making, and critical systems must rely on defence-in-depth and trusted system design — where security is embedded into the architecture from the outset, rather than retrofitted.

Functional Principles for Life

I believe that effective security must be embedded, practical, and aligned with the organisation’s mission. My approach is grounded in evidence-based decision making, where structured threat and risk assessments inform tailored, proportionate controls. 

Advocating for defence-in-depth by design is pivotal — integrating layered security into architecture from the outset rather than relying on afterthought fixes. Assurance is key: I prioritise verifiable outcomes through formal accreditation, testing, and compliance with standards like the ISM, PSPF, ISO27001 and SOC2.

Communication Foundation

Clear communication is fundamental to sustainable security. I work across all levels — from executives to technical teams — to ensure understanding, alignment, and ownership of security responsibilities. 

My focus extends beyond individual projects to include knowledge transfer, mentoring, and the development of processes that uplift organisational capability. Ultimately, I aim to deliver secure systems that support operational objectives while ensuring long-term resilience and trust.