Home / Governance, Risk & Compliance

Governance, Risk & Compliance

ISO/IEC 27001 & ISMS Consulting

Build an information security management system that connects organisational context, risk and continual improvement.

Start your enquiry
  • ISMS Implementation
  • Internal Audit
  • Certification Readiness

SERVICE IN DETAIL

From the first assessment to practical outcomes

Who this service is for

Organisations building a management framework, preparing for customer requirements or improving an existing programme.

How we work

  1. Assessment & gap analysis

    ISMS boundaries, interested parties, information assets and security risks

    Interview process owners, examine the current documents and sample supporting records. Identify gaps against the agreed framework and distinguish missing controls from controls that lack operating evidence.

  2. Implementation roadmap

    Risk treatment, Statement of Applicability, policies and operating evidence

    Prioritise actions by business risk and dependencies. Work with your owners on policies, procedures, responsibilities and practical evidence templates, then support adoption through agreed working sessions.

  3. Readiness & improvement review

    Internal audit, management review and independent certification readiness

    Review implementation evidence, discuss open issues and confirm ownership of remaining actions. Where formal certification or external assessment is needed, prepare the organisation for the appropriate independent assessment process.

What you receive

  • Gap assessment and prioritised action register
  • Agreed policies, working templates and implementation roadmap
  • Readiness summary and remaining actions for management

Certification is performed by the relevant independent certification body; our consulting work prepares your management system and evidence.

Relevant frameworks and guidance

Before we begin

We confirm the scope, responsibilities, evidence, timetable and deliverables in the proposal. The activities above are tailored to the systems and objectives agreed with your organisation.

Discuss your scope

Specialist services

Security Policies & Improvement Roadmaps

Develop security policies, procedures and prioritised improvement plans that fit organisational responsibilities and risks.

View scope, process and deliverables

Who this service is for

Organisations building a management framework, preparing for customer requirements or improving an existing programme.

How we work

  1. Assessment & gap analysis

    Existing policies, control ownership, document gaps and business constraints

    Interview process owners, examine the current documents and sample supporting records. Identify gaps against the agreed framework and distinguish missing controls from controls that lack operating evidence.

  2. Implementation roadmap

    Policy hierarchy, operating procedures, approval routes and implementation priorities

    Prioritise actions by business risk and dependencies. Work with your owners on policies, procedures, responsibilities and practical evidence templates, then support adoption through agreed working sessions.

  3. Readiness & improvement review

    Approved-document readiness, communication plan and phased improvement roadmap

    Review implementation evidence, discuss open issues and confirm ownership of remaining actions. Where formal certification or external assessment is needed, prepare the organisation for the appropriate independent assessment process.

What you receive

  • Gap assessment and prioritised action register
  • Agreed policies, working templates and implementation roadmap
  • Readiness summary and remaining actions for management
Discuss this service

TISAX Readiness Consulting

Prepare automotive supply-chain organisations for TISAX assessments through gap review, control improvement and evidence preparation.

View scope, process and deliverables

Who this service is for

Organisations building a management framework, preparing for customer requirements or improving an existing programme.

How we work

  1. Assessment & gap analysis

    Customer objectives, assessment boundaries, locations and relevant VDA ISA topics

    Interview process owners, examine the current documents and sample supporting records. Identify gaps against the agreed framework and distinguish missing controls from controls that lack operating evidence.

  2. Implementation roadmap

    ISA self-assessment, information protection, supplier controls and evidence gaps

    Prioritise actions by business risk and dependencies. Work with your owners on policies, procedures, responsibilities and practical evidence templates, then support adoption through agreed working sessions.

  3. Readiness & improvement review

    Readiness for assessment by an ENX-approved TISAX audit provider

    Review implementation evidence, discuss open issues and confirm ownership of remaining actions. Where formal certification or external assessment is needed, prepare the organisation for the appropriate independent assessment process.

What you receive

  • Gap assessment and prioritised action register
  • Agreed policies, working templates and implementation roadmap
  • Readiness summary and remaining actions for management

Relevant frameworks and guidance

Discuss this service

ISO/IEC 29110 Process Consulting

Support software process improvement through ISO/IEC 29110 training, consulting and pre-assessment.

View scope, process and deliverables

Who this service is for

Organisations building a management framework, preparing for customer requirements or improving an existing programme.

How we work

  1. Assessment & gap analysis

    Software project scope, team roles and current delivery practices

    Interview process owners, examine the current documents and sample supporting records. Identify gaps against the agreed framework and distinguish missing controls from controls that lack operating evidence.

  2. Implementation roadmap

    Project management, software implementation, configuration and verification records

    Prioritise actions by business risk and dependencies. Work with your owners on policies, procedures, responsibilities and practical evidence templates, then support adoption through agreed working sessions.

  3. Readiness & improvement review

    Project templates, process evidence and assessment-readiness actions

    Review implementation evidence, discuss open issues and confirm ownership of remaining actions. Where formal certification or external assessment is needed, prepare the organisation for the appropriate independent assessment process.

What you receive

  • Gap assessment and prioritised action register
  • Agreed policies, working templates and implementation roadmap
  • Readiness summary and remaining actions for management
Discuss this service
LET’S UNDERSTAND YOUR NEEDS

Tell us what
you need.

Answer the service-specific questions, review your summary, and send your request to our team.

A high-level summary is enough. Please do not include passwords, payment card data or confidential system evidence.

Read our privacy notice

For urgent matters, call 091 003 4852

Discuss your requirements directly with our team.

Contact our team

Related services