Where things stood
Nobody knew Glasgow’s weaknesses better than Glasgow’s own team. What the institution lacked was a bridge between that knowledge and sustained investment: committees fund cases, not concerns, and a technically accurate findings list is not yet a case.
The approach
CyPro benchmarked the current position against recognised frameworks, agreed what a defensible target looked like, and translated the gap into a programme with sequence, costs and named owners. The same analysis was then written for two readers: the practitioners who would deliver it and the committee that would pay for it.
Why it matters for resilience work
Resilience deliverables face the identical translation problem. A scenario exercise or self-assessment review that ends in technical findings changes nothing until the board can read it, weigh it and fund it, which is why everything on every service on this site ships written twice: practitioner detail underneath, board pack on top. Glasgow shows what happens when the second document is done properly.