Our Services

Advisory, assurance and certification services — delivered by practitioners who build and audit compliance programs every day.

What we do

From strategy to certification

Whether you're standing up a risk function, hardening an architecture, or heading into a certification audit — we bring the method, the evidence discipline, and the platform to get you there.

Advisory & Governance

Enterprise Risk Management

Design and operate an ERM program — risk appetite, registers, heatmaps and board reporting that drive real decisions.

Business Continuity Management

BIA, continuity and disaster-recovery plans, and exercised playbooks aligned to ISO 22301 good practice.

Security Design Reviews

Architecture and solution reviews that catch security gaps at design time — before they become findings.

Enterprise Framework Reviews

Independent reviews against SABSA, NIST CSF, ISO 27k, SOC 2, AESCSF and IEC 62443 — with a prioritised roadmap.

Assurance & Testing

Security Testing

Vulnerability assessment and penetration testing across applications, infrastructure and cloud.

Performance & Stress Testing

Load, soak and stress testing that proves your platforms hold up when it matters most.

Application Code Reviews

Secure code reviews combining tooling and expert analysis, mapped to OWASP and your SDLC.

Essential Eight Uplift

ACSC Essential Eight maturity assessment and uplift — from baseline to target maturity level.

Certification Readiness

ISO/IEC 27001 Certification

End-to-end ISMS build and certification readiness — scoping, risk treatment, SoA, and audit support.

ISO/IEC 20000-1 Certification

Service-management system implementation and readiness for ISO/IEC 20000-1 certification.

ISO/IEC 42001 Certification

AI management system design — AI registers, impact assessments and controls — ready for ISO/IEC 42001.

SOC 2 Certification

Trust Services Criteria readiness, control design and evidence preparation for your SOC 2 Type I/II.

Not sure where to start?

Tell us your obligations and deadlines — we'll shape the right engagement.

Talk to an expert →