The Beacon CRM incident: lessons in cyber security, supplier risk and cyber assurance
11 August 2026
ReadPhil Osgathorpe
Director and head of IT audit and cyber assurance
With more than 15 years’ experience across technology, risk and assurance, Phil brings a depth of experience that enables him to understand both the technical detail and its wider business implications. He works across all industries, including the not-for-profit sector, supporting organisations from growing businesses through to large and complex organisations. He works with boards, senior leadership teams and finance functions to cut through technical complexity, establish where material exposures exist and make informed, proportionate decisions about risk, resilience and investment.
His work spans cyber and IT assurance, cyber resilience, governance and control effectiveness, as well as cyber due diligence for corporate transactions. This breadth enables Phil to consider technology risk not in isolation, but in the context of an organisation’s operations, financial exposure, strategic objectives and, where relevant, transaction value.
Phil brings an evidence-led and pragmatic approach to his clients. Rather than focusing simply on whether policies and controls exist, he helps organisations understand whether key controls are working in practice, where assumptions may not be supported by evidence, and which issues genuinely warrant management attention or investment.
A key part of Phil’s role is translating complex cyber and technology matters into clear business decisions. His aim is to give boards and senior leaders greater clarity over their exposure and the confidence to prioritise action where it will make the greatest difference.
Meet Phil
With a background in both accounting and IT audit, Phil brings a unique perspective to cybersecurity and risk management. He works closely with businesses to assess vulnerabilities, improve IT controls and navigate the ever-changing cyber landscape.
Hi, my name is Phil, and I head up and lead our Cyber and IT Assurance team here at PKF Francis Clark.
A lot of people assume my role is about controls, risks and reports, but what it’s really about is helping people feel confident about technology in their business and making the uncertain feel a little more certain.
At a high level, I help organisations understand whether their technology and cyber risks are truly under control. If they’re not, I help them identify the best way to address those issues.
I really enjoy breaking down complex topics and explaining them in a simple, practical way. I used to be an accountant before moving into IT assurance, and that background helps me translate technical IT risks into financial, business and operational risks that organisations can easily understand.
Generally, when clients come to talk to me about their challenges, they leave the conversation feeling much calmer than they did at the beginning. That’s always a win for me.
For me, it’s all about trust, clarity and being easy to work with.
Outside of work, I have a young family and love spending time with them. They help keep me grounded and focused on what matters, bringing a practical and human perspective to everything I do.
I’m also a keen darts player and mildly obsessed with continually improving and getting a little bit better every day. In many ways, that’s how I approach my work as well.
If you’re looking for support that cuts through complexity and helps you build confidence in your technology and cyber risk management, I’d love to have a conversation.
