NIS2
Assess the gaps in your security governance, risk management and incident preparation, then agree the work needed to address them.
COMPLIANCE ADVICE
Make sense of
what is expected of you.
Support with NIS2, GDPR, PCI DSS, DORA, SOC 2 readiness, ISO 27001 and other compliance frameworks.
Know where you stand.
Agree what needs work.
Requirements can come from regulators, customers, contracts or your own governance. You may already have useful policies and controls in place, but need help working out how they fit.
We help you review the gaps, choose priorities and prepare the documents and evidence needed for the framework you work to.
GDPR
Review the security of personal data, document how it is protected, and plan improvements to access, retention and incident handling.
PCI DSS
Review your payment environment, work through gaps in controls and documentation, and prepare evidence for assessment.
DORA
Review ICT risk, resilience planning, incident processes and supplier oversight, with a practical plan for the gaps you find.
SOC 2 readiness
Work through control design, policies and evidence preparation ahead of an independent SOC 2 examination.
ISO 27001 and other frameworks
Map the framework you work to against your existing policies and controls. Reuse useful evidence and identify what still needs work.
A manageable piece of work.
An engagement can cover a gap assessment, control mapping, policy review, technical architecture or evidence preparation. We agree the framework, scope and responsibilities with you first.
We can also help explain the findings to colleagues and work through the actions with your team and suppliers.
For SOC 2, our work supports readiness and evidence preparation ahead of an independent examination.
Tell us which requirements you are working to.
Tell us what you are working on, and where you would like some help.