ECSC Group PLC (LON:ECSC)

Business Model and Competitive Advantage

As a service-led organisation, most of ECSC’s services are sold on a time and materials basis. Managed services are usually contracted for between one and three years, with clients purchasing the necessary hardware for installation on their site or a remote hosting facility. The set-up and installation of managed services is also chargeable, followed by a fixed monthly management fee for the contract duration. Additional management charges can apply for additional activities, such as out-of-hours support, or incident response.

Other consultancy-type services are normally chargeable on a daily basis. ECSC also sells pre-paid consultancy time to support client projects remotely. These are tracked in 15 minute blocks, facilitating earnings for consultant time deployed outside of on-site days.

ECSC offer incident response retainer which offer clients a guaranteed response in an incident; additional charges apply when the response is initiated.

ECSC has developed a cyber security service model using a consultancy-led approach, which is summarised by the philosophy of ‘listen, understand, and deliver’. ECSC’s client development strategy is to build strong client trust relationships by demonstrating ECSC’s technical capabilities and effective management communication.

The Company’s business model is to provide a full service of cyber security solutions to meet the client’s security needs, ranging from testing and incident response through to outsourcing and certifications.

In the Directors’ experience, over the medium to long-term, clients tend to gravitate towards ECSC’s outsourced managed security services rather than build their own in-house capabilities. This benefits clients, as they will be required to recruit and retain fewer specialist staff, and benefits the Company with longer-term revenues and economies of scale.

The Directors believe that the trend towards outsourcing will continue and that full service providers will be better placed to benefit from this. Rapid adoption of full outsourced services has historically proven to be more likely following a breach and an associated ECSC Incident Response.

Managed Services

Consultancy

Testing

Incident Response

Vendor Solutions

United Kingdom.

Ian Mann
Chief Executive Officer

Ian has over 18 years of experience in the cyber-security sector having founded ECSC. He was previously an adviser for GCHQ, and established a Cisco Networking Academy for Dixons City Technology College.

Ian’s professional certifications include CISSP, PCI QSA, and ISO Lead Auditor.

Ian holds a B.Eng. in Electrical and Electronic Engineering from the University of Nottingham, and an MBA from the Open University.

Lucy Sharp
Chief Operating Officer

Lucy has over 18 years of experience in the cyber-security sector, having joined ECSC at its inception. Lucy worked as an ISO 27001 consultant, leading this area prior to taking the position of Operations Director in 2012.

Lucy has held a number of professional certifications, including CISSP, PCI QSA, and ISO Lead Auditor. Whilst working at ECSC, Lucy completed a Masters in Business Management at Leeds Metropolitan University.

David Carr Mathewson
Non-Executive Chairman

David is a Chartered Accountant who has spent most of his career in merchant banking and as a Non-Executive director. He was an Executive Director of Noble Grossart Limited, Scotland’s premier merchant bank, for many years.

Previous non-executive roles include Chairman of Sportech Plc and he was a Director of Playtech Group plc. During his tenure at Playtech he was appointed chief financial officer and oversaw the company move from AIM to the main market of the London Stock Exchange.

He is currently a Non-Executive Director of AIM listed SEC Spa, an Italian company.

Elizabeth Gooch MBE
Non-Executive Director

Elizabeth Gooch is an award-winning UK tech entrepreneur, having started her career in industry, joining Forward Trust (a subsidiary of Midland Bank) and then Birmingham Midshires Building Society, before establishing eg solutions in 1988.

She pioneered the introduction of industrial production management methodologies into the service sector and invented the eg operational intelligence ® software suite to embed these techniques into businesses. eg was listed on the Alternative Investment Market and was acquired by a major US Software Company in 2017.

Elizabeth was named as one of The Telegraph's Most Disruptive Entrepreneurs and West Midlands Woman of the Year for her Outstanding Contribution to Technology. She was made a Member of the Order of the British Empire in the Queens Jubilee Birthday Honours 2012, in recognition of her achievements in delivering significant benefits for clients with the products she designed.

Elizabeth is now CEO of The Tech Growth Factory; a company she established to assist the founders of small technology companies achieve their growth potential.

The Company is aware of the following persons (excluding Directors, who are set out further below) who will hold, directly or indirectly, 3% or more of the Company's issued ordinary share capital.

28 Campus Road
Listerhills Science Park
Bradford
BD7 1HR
United Kingdom

+44 (0) 1274 736 223

[email protected]

Registered Office
ECSC Group plc
28 Campus Road
Listerhills Science Park
Bradford
BD7 1HR
United Kingdom

Tel: +44 (0) 1274 736 223
Fax: +44 (0) 1274 736 761
Service Desk: +44 (0) 1274 513 266

Reg No. 3964848
VAT No. 746361914

Company Secretary: David Mathewson

Nominated Adviser and Broker
Allenby Capital Limited
5th Floor
5 St Helen's Place
London
EC3A 6AB

David Hart

+44 (0) 20 3328 5656

Auditors and Reporting Accountants
BDO LLP
Central Square
29 Wellington Street
Leeds
LS1 4DL

Solicitors
Freeths LLP
One Vine Street
Mayfair
London
W1J 0AH

Registrars
Equiniti Limited
Aspect House
Spencer Road
Lancing Business Park
West Sussex
BN99 6DA

Financial PR
ALMA PR
Aldwych House
71-91 Aldwych
London
WC2B 4HN

Joshua Royston

+ 44 (0) 20 8004 4217