Managed GRC & audit readiness
Keep risk decisions and control evidence organised as the business grows.
We have policies from 2019 that nobody follows.
The audit is in three months and it's all in one spreadsheet.
Our overseas client is asking whether we're ISO 27001.
For CEOs, COOs and whoever gets handed the audit.
We run your risk register, keep policies short and actually in use, assign control owners, and maintain the evidence so an audit or customer review is a two-day exercise rather than a two-month panic.
Scope boundary
We prepare you for ISO/IEC 27001 and SOC 2. Certification audits are carried out by independent certification bodies, and SOC 2 reports are issued by qualified CPA firms. ISO 27001 or SOC 2 readiness is quoted as a separate project.
- An approved risk register, reviewed monthly
- A practical policy set with named owners
- Evidence index and corrective action tracker
- Quarterly management review
Framework readiness quoted as a separate project. Excludes tax, licences and third-party fees; scope confirmed in writing before work begins.
Often paired with
Start with the Health Check
Tell us which system your business can least afford to lose, or which customer review is coming up. We'll scope a fixed-fee check around it and send a one-page proposal within two working days.