CISO Tribune

Vendor comparison · 2 companies

BSI vs NGC Risk

BSI offers services and expertise in standards development, certification, training and assessment. NGC Risk provides fractional executives and risk programs for mid-market businesses. CISO Tribune files both under Security consulting and advisory. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • BSI
  • NGC Risk
BSI vs NGC Risk: Products, Customers and Funding Compared
BSIBSI offers services and expertise in standards development, certification, training and assessment.bsigroup.comNGC RiskNGC Risk provides fractional executives and risk programs for mid-market businesses.ngcrisk.com
What it sells
  • Standards development[3]BSI offers services and expertise in standards development.
  • Certification[2][3]BSI assesses, certifies, tests and audits people, products and processes.
  • Training[3]BSI offers courses that are continually updated with global trends and regulatory changes.
  • Consulting services[3]BSI offers consulting services for managing risk across an organization.
  • Software solutions[3]Software for managing audit, compliance and supply chain activities.
  • Tracked Changes[5]A variant of a standard that identifies differences from its previous version.
  • Fractional Leadership[3][4]Provides a part-time senior executive to fill a CISO, CIO/CTO, or CRO seat and own the client's security, technology, or risk strategy.
  • Digital Risk Programs[1][3]Defined-scope engagements covering disaster recovery and operational resilience, AI governance, framework readiness such as ISO 27001, ISO 42001 and SOC 2, SDLC governance, and audit response.
  • The Wardroom[1][3]An enterprise risk reasoning platform currently offered in closed beta.
Categories
Headquarters
Not stated on its pagesUnited States[2]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, BSI collaborates with clients and partners across many industries. BSI recommends its own version of some standards for organisations operating in or with the UK. In our reading, BSI's maritime structures standard is aimed at people involved in the planning, design, procurement or operation of maritime access infrastructure. BSI's maritime structures standard addresses organizations responsible for designing or maintaining infrastructure that connects vessels with shore-based facilities. BSI's software solutions are aimed at organizations managing audit, compliance and supply chain activities and regulatory information.From its own pages, NGC Risk sells mainly to mid-market businesses. NGC Risk places executives in the CISO, CIO/CTO, and CRO seats that those businesses cannot yet fill full-time. NGC Risk also offers defined-scope work such as framework readiness, SDLC governance, and audit response and remediation. NGC Risk describes a setting in which boards, regulators, clients, and insurers ask who owns the risk.
Last verified
October 14, 2026October 16, 2026

Where they overlap

  • Security consulting and advisory is the primary category of both BSI and NGC Risk.

Where they differ, field by field

  • NGC Risk is also filed under AI governance.
  • BSI lists Standards development, Certification, Training, Consulting services, Software solutions and 1 more. NGC Risk lists Fractional Leadership, Digital Risk Programs and The Wardroom.
  • NGC Risk is headquartered in United States.

How they differ

CISO Tribune files BSI under Security consulting and advisory, and it files NGC Risk under Security consulting and advisory and AI governance. BSI describes itself as the UK National Standards Body, and it offers services in standards development, certification, training and assessment. NGC Risk instead sells fractional leadership, which places a part-time senior executive in a CISO, CIO/CTO, or CRO seat.

The offerings touch in a few places. BSI offers consulting services for managing risk across an entire organization, and it also sells software for audit, compliance and supply chain activities. NGC Risk sells Digital Risk Programs, which are defined-scope engagements covering disaster recovery, AI governance, audit response, and framework readiness for ISO 27001, ISO 42001 and SOC 2. NGC Risk also lists The Wardroom, an enterprise risk reasoning platform currently offered in closed beta.

BSI states that it does not provide management system or product consultancy and certification services to the same client where there may be a conflict of interest. NGC Risk states that it owns the strategy and the program and is the accountable voice with the client's board and clients. On audience, BSI collaborates with clients and partners across many industries, while NGC Risk provides fractional executives and risk programs for mid-market businesses. NGC Risk is headquartered in the United States.

What it sells: BSI

What Standards development does[3]
BSI offers services and expertise in standards development, certification, training and assessment. BSI is the UK National Standards Body and works to improve quality, safety and well-being through standardization.
What Certification does[2][3]
BSI assesses, certifies, tests and audits people, products and processes with the support of its experts. BSI states a commitment to providing its clients with impartial and independent certification services.
What Training does[3]
BSI offers courses that are continually updated with the latest global trends and regulatory changes. BSI offers training alongside standards, certification and expertise.
What Consulting services does[3]
BSI offers consulting services for managing risk across an entire organization. BSI does not provide management system or product consultancy services and certification services to the same client where there may be a conflict of interest.

Questions about BSI and NGC Risk

What do BSI and NGC Risk sell?
BSI sells Standards development, Certification, Training, Consulting services, Software solutions and 1 more. NGC Risk sells Fractional Leadership, Digital Risk Programs and The Wardroom.
Are BSI and NGC Risk in the same category?
Yes. Security consulting and advisory is the primary category of both on CISO Tribune.
Where are BSI and NGC Risk headquartered?
NGC Risk is headquartered in United States.
Who are BSI and NGC Risk sold to?
From its own pages, BSI collaborates with clients and partners across many industries. From its own pages, NGC Risk sells mainly to mid-market businesses.

About BSI

BSI offers services and expertise in standards development, certification, training and assessment. BSI is the UK National Standards Body and works to improve quality, safety and well-being through standardization. BSI has specialized capabilities in areas including energy management, supply chain risk and digital security. BSI offers standards for guidance, training, certification and expertise to its clients.[3]

BSI assesses, certifies, tests and audits people, products and processes with the support of its experts. BSI offers consulting services for managing risk across an entire organization. BSI offers software solutions for managing audit, compliance and supply chain activities and regulatory information. BSI offers courses that are continually updated with the latest global trends and regulatory changes.[3]

BSI states a commitment to providing its clients with impartial and independent certification services. BSI does not provide management system or product consultancy services and certification services to the same client where there may be a conflict of interest.[3]

BSI collaborates with clients and partners across many industries. BSI works with partners to help shape standards for the common good. BSI describes its aim in digital trust as shaping society by developing a resilient digital future that respects privacy, safety, security and reliability. BSI provides information on the revision status of popular ISO standards, including ISO 9001 and ISO 45001. BSI embeds sustainability into its own business and services.[3]

Access to related modules is exclusive to module subscribers. In a tracked changes document, additions, deletions and other content revisions are displayed as underlined or strikethrough text. BSI recommends its own version of some standards for organisations operating in or with the UK.[4][5]

BS 6349-8:2026 provides recommendations covering the design and delivery of vehicle linkspans, ramps and seaport passenger boarding bridges. BSI's maritime structures code of practice covers structural elements and the integration of mechanical systems. BSI's revised maritime structures publication reflects modern procurement practices and contemporary design requirements. BS EN 13748-2:2004 specifies the materials, properties and methods of testing for unreinforced cement-bound terrazzo tiles that are factory made and sold ready to be placed. BSI's standard on terrazzo tiles for external use covers tiles intended for external use, including roofing applications, in pedestrian areas such as walkways, terraces, commercial centres and swimming pools.[7]

Between 2001 and 2010, a 12-part series of standards was developed covering the structural design, construction and maintenance of pavements using modular paving units. BSI's pavement design code of practice excludes the design of permeable pavements which collect, attenuate and provide a drainage feature. BSI's pavement design code of practice allows reused materials provided they meet the recommendations of the appropriate clauses. BSI's whistleblowing management systems guidelines provide a framework for establishing a whistleblowing system within an organization. Organizations worldwide increasingly want to introduce or improve internal policies and processes for handling whistleblowing. Whistleblowing is the act of reporting suspected wrongdoing or risk of wrongdoing.[4][8]

BSI's timber in joinery standard helps determine the characteristics and classify, by appearance, the quality of timber in joinery. Timber joinery is a traditional post and beam wood construction technique that connects wood members without metal fasteners. Flexible sheet heating elements are converted into heating units that are incorporated into the building according to the instructions.[2][4][5][9][10]

BSI on the record

Sources

BSI full record

  1. [1]CybersecurityBSI Group · bsigroup.com · undated page, accessed October 14, 2026 · Tier A
  2. [2]bsigroup.comBSI Group · bsigroup.com · undated page, accessed October 14, 2026 · Tier A
  3. [3]Accelerating Progress Towards a Sustainable World | BSI UKBSI · undated page, accessed November 10, 2026 · Tier A
  4. [4]BS ISO 37002:2021 Whistleblowing management systemsBSI · published July 31, 2021 · Tier A
  5. [5]BS EN 1279-1:2018 Insulating glass unitsBSI · published August 31, 2018 · Tier A
  6. [6]BS 6349-8:2026 Maritime structuresBSI · published August 31, 2026 · Tier A
  7. [7]BS EN 13748-2:2004 Terrazzo tiles for external useBSI · published July 13, 2004 · Tier A
  8. [8]BS 7533-101:2021 Pavements code of practiceBSI · published November 30, 2021 · Tier A
  9. [9]BS EN 942:2007 Timber in joineryBSI · published March 30, 2007 · Tier A
  10. [10]BS EN IEC 60335-2-96 Flexible sheet heating elementsBSI · published April 30, 2022 · Tier A

NGC Risk full record

  1. [1]ngcrisk.comNGC Risk · ngcrisk.com · undated page, accessed October 16, 2026 · Tier A
  2. [2]PrivacyNGC Risk · ngcrisk.com · published October 2, 2026 · Tier A
  3. [3]NGC Risk | Leadership that sees what's comingNGC Risk · undated page, accessed November 10, 2026 · Tier A
  4. [4]About | NGC RiskNGC Risk · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.