Secure your business.
Make technology work.

Assess web applications, APIs, mobile apps and internal or external networks. Turn technical findings into a prioritised remediation plan, with testing boundaries and a retest scope agreed before work begins.

• ✓Manual validation of vulnerabilities and business-logic risks
• ✓Authorised testing windows and agreed rules of engagement
• ✓Executive summary plus reproducible technical evidence
• ✓Remediation guidance and a scoped retest plan

Testing findings apply to the agreed scope and assessment date; they do not guarantee that a system is free of vulnerabilities.

Build an information security management system around your business, people and technology. We help organise the risk assessment, policies and evidence needed for an independent certification audit.

• ✓Define the ISMS scope and assess current gaps
• ✓Build the risk register and Statement of Applicability
• ✓Prepare policies, control owners and implementation evidence
• ✓Support internal audit, management review and corrective actions

Certification is issued by an independent certification body following its audit; readiness support does not guarantee certification.

Prepare your organisation for a SOC 2 examination with a clear control framework, ownership and evidence collection plan. Choose the readiness work appropriate to a Type I or Type II engagement with your independent auditor.

• ✓Map relevant Trust Services Criteria to your controls
• ✓Document policies, system boundaries and responsibilities
• ✓Organise evidence and address control gaps
• ✓Coordinate audit preparation and respond to evidence requests

The SOC 2 report is issued by an independent CPA firm. Type I addresses a point in time; Type II evaluates controls over a specified period.

Understand how personal data moves through your business and turn the applicable requirements into an operational plan. Prioritise data inventories, notices, consent workflows, safeguards and accountable owners.

• ✓Map personal data, processing purposes and vendors
• ✓Review notices and consent or other applicable processing grounds
• ✓Plan rights requests, retention and deletion workflows
• ✓Prepare incident response and an implementation roadmap

Applicability and implementation priorities depend on your activities and the requirements in force. Legal interpretations should be confirmed with your legal adviser.