Independent security & technology risk advisory
Fortuna Systems helps growing and regulated organisations manage cyber risk, satisfy enterprise customer assurance requirements and establish effective security governance—without unnecessarily increasing permanent headcount.
Supporting organisations across the UK, continental Europe and Scandinavia.
B2B SaaS & technology · Fintech & financial services
PE-backed, scaling & regulated organisations
Business challenges
When customer demands grow or decisions stall, you need clear priorities and experienced judgement. Fortuna Systems helps you turn security challenges into an agreed plan—and keep the work moving.
Our services
Fractional CISO / vCISO
When security responsibilities outgrow your leadership capacity, bring in experienced support to establish direction, ownership and priorities. Work with a senior adviser through an agreed remit and a consistent relationship.
Explore fractional leadershipAn agreed remit. A consistent relationship. Clear accountability.
Enterprise Customer Security Assurance
Difficult security questions need credible answers, supported by evidence. Explain your security position, prepare for customer due diligence and address gaps with clear ownership across commercial and technical teams.
Strengthen customer assuranceISO 27001 and SOC 2 Readiness and Recovery
Starting a programme—or bringing one back on track? Establish what is missing, what matters most and who needs to act, with a realistic plan for controls, evidence and assessment preparation.
Discuss readiness and recoveryAI Governance, Privacy and Technology Risk
Make informed choices about AI, personal data and technology change. Identify material risks, clarify accountability and establish proportionate controls that support responsible adoption and everyday decisions.
Explore technology risk advisoryBoard and Executive Cyber Risk Advisory
When the stakes are significant, experienced independent challenge helps you see the options more clearly. Test assumptions and translate cyber risk into practical choices about investment, resilience and accountability.
Explore executive advisoryThe Third OpinionA focused review before you commit.
Why Fortuna Systems
Senior support that connects security requirements with commercial priorities—and gives your teams the clarity to act.
24+ years across information security, cyber risk, assurance and governance in financial services, SaaS and technology.
A clear perspective on your priorities, informed by business context and independent of product vendors.
Recommendations shaped by material risk, customer expectations, resources and the needs of your organisation.
Work directly with Chun Wong, with an agreed scope, clear responsibilities and practical next steps.
Engagement models
Agree the outcomes, responsibilities and cadence before work begins. Progress is reviewed against agreed deliverables, evidence and actions.
Recurring senior security leadership with an agreed remit and review cadence. Establish priorities, maintain oversight and coordinate improvement with your teams.
A defined challenge, a clear scope and tangible deliverables. Suitable for readiness reviews, assurance preparation, governance assessments, programme recovery and an independent third opinion.
Independent reviews, briefings and scenario discussions to support informed decisions about material cyber and technology risks.
Advisory support, separate from a formal non-executive director appointment.
About the principal
Fortuna Systems is led by Chun Wong, an information security and cyber risk leader with more than 24 years’ experience across financial services, SaaS and technology businesses.
His work spans security leadership, ISO 27001 and SOC 2 programmes, enterprise customer assurance, third-party risk, privacy, operational resilience and executive reporting.
More about Chun Wong →Insights
Business enablement
Turning trust into business value by using governance and assurance to support safe growth.
Read on LinkedIn
Agentic AI
Governing agentic systems in practice: control, accountability, guard rails and human oversight.
Read on LinkedIn
Payments security
What more than two decades in payments still teaches us about trust, control and resilience.
Read on LinkedIn
Pragmatic security
Better decisions, stronger outcomes and a more resilient business start with risk understood.
Read on LinkedIn
AI governance
Risk-tier AI use by impact and consequence, then apply proportionate governance.
Read on LinkedIn
AI governance
Why visibility, accountability and assurance around AI adoption belong in the boardroom.
Read on LinkedIn
AI governance
Testing whether controls, evidence and accountability operate effectively in practice.
Read on LinkedIn
AI operating model
Governance works when policy becomes ownership, standards, challenge and usable decision paths.
Read on LinkedIn
Operational resilience
Plan for failure by protecting the business outcome, not merely system uptime.
Read on LinkedIn
AI governance leadership
Where security should lead, where it should enable, and where accountability should remain elsewhere.
Read on LinkedIn
Privacy & data protection
Data transfers, adequacy and the practical privacy implications of the UK’s post-Brexit position.
Read on LinkedInStart a conversation
Arrange a confidential, no-obligation introductory discussion about your priorities and the support you need—wherever you are based in the UK, continental Europe or Scandinavia.
Tell us briefly about your organisation, the challenge you are facing and any important timescales. We will discuss whether ongoing leadership or a focused advisory engagement is the right fit.
contact@fortunasystems.co.uk