About 6.Three

George Miguel, Director
6.Three is my independent advisory practice for organisations introducing change under real delivery, operational, governance, and information security constraints.
As innovation accelerates, transformation, governance, and information security can no longer be treated as separate concerns. Change has to move forward, but it also has to be designed, governed, secured, and delivered in a way that holds up in practice.
My work is hands-on and senior-led. I stay close to both the direction and the detail, bringing in trusted specialists where additional depth is useful, without changing how the work is led.
What’s in a name
The name comes from clause 6.3 of ISO 27001:
6.3 Planning of changes
When the organization determines the need for changes to the information security management system, the changes shall be carried out in a planned manner.
It’s a short clause, but it captures a much larger problem.
Organisations are constantly being asked to change, but the rules around that change are often vague, inherited, or applied out of context. People end up trying to deliver serious enterprise change while interpreting requirements that weren’t written for their situation, carrying forward rules no one quite understands, or inventing new ones just to keep things moving.
6.Three is built for that space.
The work is about helping organisations make change in a planned, usable way. Clear enough for governance, practical enough for delivery, and grounded enough to make sense to the people who have to live with it.
From Cambiont to 6.Three
Cambiont was my earlier transformation-focused practice, centred on enterprise change, innovation, and the realities of introducing new technology into large organisations.
6.Three keeps the same underlying approach, but brings that transformation experience together with governance and information security.
