DRGT Consulting

What DRGT Consulting does

DRGT Consulting is a Melbourne-based, privately held specialist advisory firm operating in cybersecurity, data privacy, and AI governance. It was founded by Dr. Georg Thomas, who serves as Managing Director alongside a Sales Director (Kris Thomas) and Head of Operations (Alana Thomas), with an open posting for a GRC Consultant. The firm's core offering spans four service lines: ISO Consulting (implementation, preparation, and internal audit for ISO/IEC 27001, 27701, 42001, and integrated management systems incorporating ISO 9001 and 45001); Fractional CISO (retainer-based security leadership, risk assessment, compliance, and incident response planning); M&A Cyber/IT Due Diligence (Cyber Security Due Diligence, Technology Due Diligence, and Transaction Support across the deal lifecycle); and Expert Consultant services for cyber and data breach legal matters.

The business model is direct, professional-services delivery: bespoke advisory engagements sold through the firm website (drgt.com.au), a dedicated phone line (1800 31 RISK / 7475), and inbound consultation requests. Pricing is not publicly disclosed, consistent with a contact-based, scope-driven quoting approach. The firm serves five named verticals — Financial Services, Law Firms, Property, Government, and Non-Profit Organisations — with no channel partners, resellers, or platform intermediaries. Geographic scope is anchored in Melbourne/Victoria, though the founder's biography indicates prior work across Australia, the United States, and multiple other jurisdictions, and the firm references a global-experience positioning rather than a formal global footprint. Operating status is active, the company is privately held with no disclosed external investors, and reported headcount is 1-10 employees.

Name

DRGT Consulting

Legal name

DRGT Consulting

Website

https://drgt.com.au

Company type

Private

Founded year

2026

Operating status

Operating

Headcount range

1–10 employees

Short description

DRGT Consulting is a Melbourne-based specialist advisory firm offering cybersecurity, data privacy, and AI governance consulting — including ISO certification, fractional CISO, M&A cyber due diligence, and expert witness services — to financial services, law firms, property, government, and non-profit organisations.

Ownership category

akta.pro rank

Product category

Cybersecurity and Information Security Advisory

NAICS

Management Consulting Services (54161), Other Management Consulting Services (541618)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Cybersecurity & Identity Consulting (BPAHAEAG)

akta.pro secondary industries

Risk, Compliance & Internal Controls Consulting (BPAHACAJ), GRC, Policy Management & Controls Testing (SOX/ICFR, audit management) (FSAGAFAM)

Keywords

• Cybersecurity consulting
• Information security advisory
• Data privacy services
• AI governance consulting
• ISO certification consulting

Headquarters

HQ city

Melbourne

HQ country

Australia

HQ region

Oceania

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Distribution channels1 record

Marketing channels3 records

Core offering

DRGT Consulting is a specialist advisory firm that designs and implements management systems for information security, privacy, and responsible AI, aligned with international standards such as ISO/IEC 27001, ISO/IEC 27701, and ISO/IEC 42001. Its core services include ISO Consulting (implementation and internal audit support), Fractional CISO engagements (part-time/retainer security leadership), M&A Cyber/IT Due Diligence (cyber security, technology, and transaction support assessments), and Expert Consultant services for legal matters involving cyber and data breaches.

Product overview

DRGT Consulting is a Melbourne-based specialist advisory firm offering a portfolio of consulting services focused on information security, privacy, and AI governance. The core offerings include: ISO Consulting (implementation and audit support for ISO/IEC 27001, 27701, and 42001 certifications); Fractional CISO (part-time CISO services with security strategy, risk assessment, and incident response planning components); M&A Cyber/IT Due Diligence (comprising Cyber Security Due Diligence, Technology Due Diligence, and Transaction Support sub-services); and Expert Consultant services for legal matters. These services are delivered by an experienced team and are targeted at organizations across financial services, law firms, property, government, and non-profit sectors seeking to achieve certification, manage cyber risk, and ensure compliance.

Differentiator

Problem solved

Functional benefit

Products and services

• ISO Consulting Implementation, preparation, and internal audit services for ISO-based management systems including ISO/IEC 27001 (Information Security), ISO/IEC 27701 (Privacy), and ISO/IEC 42001 (AI Governance), with additional experience in integrated management systems covering ISO 9001 and ISO 45001. Delivered to organisations seeking certification or formal management system alignment across security, privacy, and quality/safety domains.
• Fractional CISO Part-time or retainer-based Chief Information Security Officer services providing enterprise-grade security leadership, security strategy and roadmap development, risk assessment and compliance, and incident response planning without the cost of a full-time executive. Targeted at organisations that need senior security leadership but do not require or cannot justify a full-time CISO hire.
• M&A Cyber/IT Due Diligence Assessment of the cybersecurity posture and IT infrastructure of target companies to identify risks, liabilities, and integration challenges that could impact the value or success of a deal, combining Cyber Security Due Diligence, Technology Due Diligence, and Transaction Support services across the M&A lifecycle. Delivered to acquirers, investors, and target companies undertaking mergers, acquisitions, or investment transactions.
• Expert Consultant Expert consultant services for legal matters relating to cyber and data breaches, including review of discovery packages and the delivery of pragmatic expert opinions grounded in industry best practices. Provided to legal teams, litigants, and organisations involved in cyber and data breach disputes or regulatory matters.

Segments5 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Recent moves6 records

Expansion highlights6 records

Direct peers

• Trustwave: Cybersecurity and compliance services firm delivering ISO implementation, GRC consulting, and incident response — overlapping with DRGT's ISO consulting and Fractional CISO service lines.
• NCC Group: Global cybersecurity and risk advisory firm providing ISO 27001 consulting, managed GRC, and cyber due diligence services — directly comparable offerings to DRGT's portfolio, including AI risk and ISO 42001 advisory.
• CyberCX: Australia's largest dedicated cybersecurity services firm, offering GRC, ISO consulting, virtual CISO, and M&A cyber due diligence across financial services, government, and critical infrastructure — a direct head-to-head competitor to DRGT in the same geography.

Broad incumbents

• EY Australia (Cyber Security Consulting): Big 4 cyber advisory practice delivering ISO 27001/27701 implementation, vCISO, and transaction cyber diligence across Australia — broad incumbent overlap with DRGT's service portfolio.
• PwC Australia (Cyber, Risk & Regulatory): Big 4 firm offering cyber risk, privacy, AI governance, and ISO advisory across Australian financial services, government, and listed corporates — competes with DRGT for mid-market and enterprise engagements.
• KPMG Australia (Cyber Practice): Big 4 advisory practice with a sizable cyber, privacy, and AI governance team in Australia, serving financial services, government, and large enterprises — competes for the same ISO, GRC, and cyber due diligence mandates as DRGT but at much greater scale.
• Deloitte Australia (Cyber & Strategic Risk): Big 4 cyber and risk advisory with strong credentials in ISO certification, AI governance, and M&A cyber due diligence — a major incumbent competitor for the same client mandates DRGT targets.
• Mandiant (Google Cloud): Global cyber advisory firm (now part of Google Cloud) offering incident response, cyber due diligence, and security strategy consulting — directly overlapping DRGT's M&A cyber due diligence and Fractional CISO offerings at global scale.

Emerging players

• Loop Secure: Australian boutique cybersecurity advisory firm offering ISO 27001, governance, risk, and compliance consulting — comparable emerging competitor to DRGT in the same geography and SME/mid-market segment.

Regional players

• Tesserent (Thales): Australian-headquartered cybersecurity services firm (now part of Thales) providing GRC, ISO consulting, and cyber advisory — directly comparable to DRGT in the Australian market.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights5 records

Customer concentration

• LinkedInlinkedin.com/company/drgt-consulting

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DRGT Consulting