Pass the audit your clients ask for.
Enterprise clients, investors and regulators increasingly ask for proof of security. We take you from a gap assessment to an audit-ready program, with controls that reduce risk rather than paperwork that only passes.
- Price
- Set in your written proposal
- You receive
- A gap assessment, the policies and controls to close it, and the evidence your auditor will ask for.
Scope, timeline and price in writing before any work starts.
Frameworks. The ones clients ask about.
- 01
ISO 27001
The international standard for an information security management system, and a certificate clients recognize worldwide.
- 02
SOC 2
The attestation US clients usually ask software and service providers for.
- 03
NIS2
The EU directive for essential and important entities, with management accountability and incident reporting duties.
- 04
DORA
The EU regulation on digital resilience for financial entities and the technology providers they rely on.
- 05
GDPR
The security of processing and breach response parts of the EU data protection rules.
How we get you there. Step by step.
- 01
Gap assessment
Where you stand against the framework today, and what it takes to close the gap.
- 02
Policies and controls
Policies short enough to be followed, and the technical controls that back them up.
- 03
Evidence
What the auditor will ask to see, collected as part of normal work rather than the week before the audit.
- 04
Audit support
Preparation, the auditor’s questions answered and findings closed afterwards.
Questions, answered.
01Can you get us certified?
We prepare you: gap assessment, policies, controls and evidence. Certification itself comes from an accredited auditor.
02Can you help with client security questionnaires?
Yes. We answer them with you and build a reusable set of answers and evidence, so the next one takes hours rather than weeks.
Know where you stand before an attacker does.
Tell us what you run and what worries you. We will come back with a scope, a timeline and a price.