SERVICES
We support risk and control assessments, organise the evidence for internal audit and readiness reviews, and help teams assign, prioritise and track remediation across technology, information security, data and operations.
Assessment of information-security, technology, data and operational risks and the controls intended to manage them.
Planning, evidence assessment, control testing, work-programme support, findings development and follow-up for internal assurance work.
Reviews against agreed criteria from ISO/IEC 27001 or ISO 9001, or relevant NIS2- and DORA-related requirements. This is readiness support, not certification or legal advice.
Clear actions with owners, priorities, evidence requirements and closure support for control and audit findings.
Agree the requirements, scope, owners and evidence expectations.
Map the risks, controls, responsibilities and available evidence.
Test the controls against the agreed criteria and record gaps, limitations and priorities.
Set actions, evidence requirements, reporting and follow-up.
Contact
Describe what the matter is about, the timing, the jurisdiction and the decision, deadline or work product you need support with. We agree the next step before any sensitive information is exchanged.