InquilionGRC was developed from real governance work with real boards. It exists because a recurring gap was observed and no existing service addressed it.
InquilionGRC grew out of practical delivery work undertaken by Bentlebury Limited on behalf of boards and senior leadership teams across regulated and non-regulated organisations.
Through this work, a consistent pattern emerged. Microsoft 365 underpinned critical business operations in every organisation, yet no board received independent evidence on how it was configured. Configuration was assumed to be correct, responsibility was diffused across IT teams and suppliers, and oversight was indirect at best.
InquilionGRC was created to address that specific gap. It standardises the assessment methodology, governance framing and reporting structure into a repeatable service that can be delivered consistently across organisations of varying size, sector and regulatory context.
It is a formalisation of work already delivered, tested and valued by boards.
InquilionGRC is a governance assurance offering of Bentlebury Limited, a UK-based technology governance and advisory firm. Bentlebury works with boards, executives and portfolio oversight teams on digital risk, operational resilience and governance oversight.
InquilionGRC operates as a defined capability within Bentlebury, intentionally separated from any delivery, remediation or operational management activity. There is no commercial incentive to find problems or to minimise them. Independence is maintained by design, not by policy. Further information on Bentlebury's advisory and governance work is at bentlebury.com.
Andrew is a technology governance adviser with over two decades of experience working with boards, PE houses and executive teams on digital risk, operational resilience and governance oversight. He is FCA-registered as an individual and serves as fractional CTO within an FCA-authorised advisory firm, providing direct operational insight into how regulated boards govern technology risk, consume assurance and discharge personal accountability.
His background includes acting as a fractional CIO and undertaking technology due diligence and advisory work in private equity and investment contexts, supporting leadership teams in identifying and managing digital and operational risks that were not visible at board level. He currently serves as a Trustee of the Steelbacks Foundation, a Non-Executive Director of Northamptonshire Recreational Cricket CIC, and as a board adviser to Inspiring Empires. These roles have reinforced a practical understanding of how boards assess risk, consume assurance and discharge accountability without becoming involved in technical detail.
Independence. Evidence. Board-grade assurance. No delivery, no remediation, no conflicts of interest.
Gary leads commercial activity across InquilionGRC and TechSteady. His background spans senior commercial leadership roles in managed services, technology outsourcing and professional services, including Business Development Director at Claranet, a leading international managed services provider, where he held a worldwide portfolio.
Gary's network across the MSP, private equity and professional services sectors is built on relationship-led business development. He understands how technology decisions are made at board level and how commercial relationships need to be structured to support long-term governance commitments. He also looks after the referral scheme.
A briefing takes thirty minutes and commits you to nothing.
REQUEST INFO