The Beacon CRM incident: lessons in cyber security, supplier risk and cyber assurance
11 August 2026
ReadPhil Osgathorpe
Director and head of IT audit and cyber assurance
Meet Phil
With a background in both accounting and IT audit, Phil brings a unique perspective to cybersecurity and risk management. He works closely with businesses to assess vulnerabilities, improve IT controls and navigate the ever-changing cyber landscape.
Hi, my name is Phil, and I head up and lead our Cyber and IT Assurance team here at PKF Francis Clark.
A lot of people assume my role is about controls, risks and reports, but what it’s really about is helping people feel confident about technology in their business and making the uncertain feel a little more certain.
At a high level, I help organisations understand whether their technology and cyber risks are truly under control. If they’re not, I help them identify the best way to address those issues.
I really enjoy breaking down complex topics and explaining them in a simple, practical way. I used to be an accountant before moving into IT assurance, and that background helps me translate technical IT risks into financial, business and operational risks that organisations can easily understand.
Generally, when clients come to talk to me about their challenges, they leave the conversation feeling much calmer than they did at the beginning. That’s always a win for me.
For me, it’s all about trust, clarity and being easy to work with.
Outside of work, I have a young family and love spending time with them. They help keep me grounded and focused on what matters, bringing a practical and human perspective to everything I do.
I’m also a keen darts player and mildly obsessed with continually improving and getting a little bit better every day. In many ways, that’s how I approach my work as well.
If you’re looking for support that cuts through complexity and helps you build confidence in your technology and cyber risk management, I’d love to have a conversation.
Phil leads our IT assurance and cyber services teams and is a passionate leader at Francis Clark. He supports and leads the delivery of assurance and advisory services to a range of clients, including detailed attack vector analysis, vulnerability management services and other bespoke cyber security services. He is based in the firm’s Plymouth office, but travels all over the South West.
Phil is an IT audit professional with over 12 years’ experience with one of the Big Four. Previously qualifying as an accountant, Phil has extensive experience in identifying and mitigating business and audit risk, with a specific focus on IT risks and controls. He has supported external audit engagements for large, complex groups as well as smaller, privately owned businesses. Phil has had exposure to many different accounting and financial reporting systems as well as web-based and IT support applications.
Phil is an independent advisor to a private company operating in the public sector and therefore understands and appreciates the internal challenges that cybersecurity poses. He has sat on both sides of the table in a Boardroom and is conscious of communicating effectively.
He has had a wide-range of experience with different auditing standards and is well-versed with the IT audit requirements of the FRC and PCAOB. He enjoys designing, developing and delivering training on these topic areas. Phil has experience in delivering internal audits focussing on business and IT process improvements, strengthening internal controls and effective risk management.
Phil is a friendly professional who enjoys building relationships so that he may better support his clients.
