Services
Every engagement is scoped to your environment, staffed by in-house specialists and delivered against dates we commit to in writing.
End-to-end PCI DSS v4.0 readiness, gap assessment, remediation support and certification for merchants and service providers.
Timeline: 8-12 weeks
Readiness assessment, control design and audit facilitation for SOC 2 Type I and Type II across all five trust services criteria.
Timeline: 6-10 weeks
Build a right-sized ISMS aligned to ISO/IEC 27001:2022, from risk assessment through stage 1 and stage 2 certification audits.
Timeline: 10-14 weeks
Data protection programmes covering data mapping, DPIAs, consent, cross-border transfers, DPO-as-a-service and breach readiness.
Timeline: 6-12 weeks
Privacy, security and breach notification rule assessments for covered entities, business associates and health-tech platforms.
Timeline: 6-10 weeks
Network, web, mobile, cloud and API penetration testing with exploit-validated findings and developer-ready remediation guidance.
Timeline: 2-4 weeks
Make AI adoption defensible with model inventories, risk classification, ISO 42001 management systems and LLM security testing.
Timeline: 8-12 weeks
Design and operate a vendor risk programme: tiering, due-diligence questionnaires, contractual controls and continuous monitoring.
Timeline: 4-8 weeks
Fractional security leadership covering strategy, governance, board reporting, incident response readiness and audit management.
Timeline: Ongoing retainer
01
Scoping workshops, data flow mapping and a clear view of the applicable frameworks.
02
Control-by-control gap assessment with risk-ranked findings and effort estimates.
03
Hands-on support to build policies, harden systems and gather audit evidence.
04
Audit execution or auditor liaison, followed by continuous compliance monitoring.
