If my understanding of this company is correct it has three main...

If my understanding of this company is correct it has three main business units which the latter two tie in with your comments. 

The first being the iSelect model where they refer Cyber security products to their clients, that I discussed earlier.

The second, is what I consider the S&P or Moody's model where they provide companies a ranking based on the target companies cyber security measures.  This allows third party companies to understand how protected their data is should they work with the target companies.  Refer to the recent announcement relating to the US Government.

The third is a consulting company that provide cyber security advise.