About NGC Risk
NGC Risk provides fractional executives and risk programs for mid-market businesses.[3]
NGC Risk puts experienced executives into the CISO, CIO/CTO, and CRO seats that mid-market businesses cannot yet fill full-time. NGC Risk then builds the risk, resilience, and governance programs underneath those executives. NGC Risk steps into the executive seat and builds the governance and resilience programs underneath it.[3][4]
NGC Risk works across the whole of digital risk: cyber, technology, AI, and resilience. NGC Risk says cyber, technology, AI, and resilience used to sit in separate lanes. Boards, regulators, clients, and insurers now ask one question across all of them: who owns the risk?[3][4]
For the executive seat, NGC Risk places a senior executive in the security, technology, or risk seat of a client, part-time. NGC Risk states that it owns the strategy and the program and is the accountable voice with the client's board and clients.[3]
NGC Risk also sells defined-scope builds for disaster recovery and operational resilience, AI governance, SDLC governance, and audit response and remediation. These builds include framework readiness for ISO 27001, ISO 42001, and SOC 2.[1][3]
Dan Gorecki is the principal at NGC Risk and runs every engagement himself. Senior advisors with the same operator background join Dan Gorecki when the work needs more hands. Everyone on the NGC Risk bench has sat in the chair, answered to a board, and lived with the program afterward.[1][3][4]
NGC Risk on the record