Scutaria is an independent practice based in Switzerland. It helps security leaders, general counsel and boards get a grip on third-party risk, insider risk and the overlap between cyber and physical security, in whichever jurisdictions they operate.
The name comes from the scutum, the Roman legionary’s shield: it protected the soldier, and in formation it protected the people next to him. Most risk today travels through suppliers, insiders and shared infrastructure. That is where the shield has to be.
Each of these is owned by several teams and fully by none. Scutaria works across security, legal, procurement, HR and operations to give them a single owner, a method and a measurable outcome.
Suppliers, outsourcers, cloud platforms and agents now carry a large share of operational and data risk. Scutaria builds programmes that tier vendors by real exposure, assess them proportionately and keep the evidence regulators now ask for under DORA and NIS2.
Trusted people with legitimate access remain the hardest threat to detect and the most delicate to manage. Scutaria designs insider-risk programmes that are lawful, proportionate and defensible, with the right balance of HR, legal, security and monitoring.
Access control, CCTV, building systems and OT are networked, and the teams running them rarely share a risk picture with the SOC. Scutaria brings twenty years across intelligence, physical security and cybersecurity to close that gap.
Most relationships start with a diagnostic. Some stop there with a clear plan; others continue into building the programme, and then into ongoing advisory once it runs. Fees are fixed per engagement and agreed up front.
When you need a clear, independent picture
A focused assessment of your third-party, insider or converged-security posture against the regulations and standards that apply to you, ending in findings the board can act on.
Typically four to eight weeks
When you need the programme built, not just described
Design and stand up a third-party or insider-risk programme end to end: operating model, policies, assessment method, tooling selection and the handover to the team that will run it.
Typically three to nine months
When you want senior judgement on call
A fractional risk advisor for organisations that have a programme and want it to keep pace with the business, the threat and the regulator, without hiring a full-time senior role.
Rolling, reviewed every six months
Multinational organisations are asked the same questions by different regulators in different words. Scutaria maps those requirements once, so a single programme can answer all of them.
Founder and senior advisor
Eric has spent twenty years in intelligence, cybersecurity and physical security, in government and in the private sector. He spent ten of those years in Asia, and has since worked on data-protection and security programmes for the Gulf, India and Europe with Richemont and Accenture.
That path is why Scutaria looks at risk the way it does: through the people who hold access, the partners who share it and the buildings and systems that connect them, rather than through any single control domain.
Eric works in French and English, from the Lake Geneva region, and travels where the work is.
A first conversation is free and usually takes forty minutes. If Scutaria is not the right fit, you will leave with a straight answer and, where possible, a name of someone who is.