Elsie Day

Accreditations:
- BA Criminology
- MSc Crime Science and Cyber Crime
- ISC2 – Certified in Cyber Security
- Prince2 Practitioner
Elsie is a Senior Security Consultant specialising in cyber security governance, risk, compliance and assurance. With particular expertise in Cyber Essentials and Cyber Essentials Plus, alongside frameworks including ISO 27001, she has experience delivering security maturity assessments, gap analyses, risk assessments and developing security strategies tailored to organisational needs.
At CyPro, Elsie leads and manages client engagements across a diverse range of sectors, including technology, higher education and regulated industries. She works closely with stakeholders to assess security capabilities, navigate complex regulatory and compliance requirements, and identify opportunities to strengthen cyber resilience. Her work spans certification programmes, security governance, identity and access management, and the development of proportionate security controls that align with business objectives.
Elsie holds an MSc in Crime Science with Cyber Crime from University College London (UCL), alongside the ISC2 Certified in Cybersecurity (CC) certification and PRINCE2 Practitioner qualification. Combining her academic background with a structured, collaborative approach to consulting, she translates complex security challenges into clear, actionable recommendations that support long-term improvements in organisational security maturity.
Elsie Day's Posts

Cyber Essentials Cost: Full UK Pricing Breakdown for 2026
Cyber Essentials cost in the UK typically ranges from £100-£400 for self-assessment and £400-£3,500 for Cyber Essentials Plus. At CyPro,…

Carnival data breach 2026: Passport Details Exposed
The Carnival data breach 2026 refers to reports of unauthorised access to passenger records at Carnival in late May 2026;…

What Is Managed SOC as a Service and How It Works in 2026
Managed SOC as a service is an outsourced team and platform that delivers continuous detection, triage, response and reporting across…

A Practical Guide to Network Vulnerability Scanning for Organisations
Network vulnerability scanning is an automated process that finds known software and configuration weaknesses across hosts and services and ranks…

What Is Cyber Risk and How UK Boards Should Measure It in 2026
Cyber risk is the likelihood and business impact of objectives being lost or disrupted by cyber incidents, assessed from threats,…

Cyber Security Audit vs IT Audit: What’s the Difference?
Discover the key differences in cyber security vs IT audit, why both matter for compliance and resilience, and how to…




















































