Technology and digital businesses
Help managing cybersecurity, data protection, AI, cloud and wider technology risk.
Services
ISO & Compliance Readiness
We prepare organisations for management-system standards such as ISO/IEC 27001 and ISO/IEC 42001. Our role is advisory: we help you get ready, and an independent certification body carries out the assessment and issues any certificate.
What this covers
- Gap assessment against the requirements of the standard
- Scoping of the management system
- Risk assessment and risk treatment
- Control selection and the statement of applicability
- Policies, procedures and required records
- Internal audit preparation
- Management review
- Readiness support ahead of an external assessment
How we work on this
The same five steps apply to every service, applied here to this work.
Assess
Establish the scope, context and where you stand against the standard.
Identify
List the gaps and the risks your management system must address.
Design
Design the policies, processes and records the standard requires.
Implement
Help your team operate the system and generate the evidence it produces.
Monitor & Improve
Run internal review and management review, and act on the findings.
Who it's for
Professional services organisations
Protection for confidential information under growing regulatory obligation.
Related services
AI Governance & Responsible AI
Governance over how AI is selected, implemented, used and monitored.
Cybersecurity Governance & Vulnerability Management
Cybersecurity governance and vulnerability management programmes.
View this service: Cybersecurity Governance & Vulnerability Management
SOC 2 & Controls Readiness
Preparing your controls and evidence for a SOC 2 assessment.
Discuss your ISO readiness
Tell us what you are working towards and we will advise on where to start.