Services
The full practice.
Attestations. Advisory. Technical security. Three practice areas, one partner-led firm — engaged by enterprises that treat compliance as a boardroom matter, not a procurement one.
01
Attestations & Certifications
Reports and certificates the market recognises.
SOC 2 (overview)
The pillar page: Type I vs Type II, scoping, and the operating model.
→SOC 2 Type I
Point-in-time assurance for an emerging trust story.
→SOC 2 Type II
Operating effectiveness across a defined observation period.
→SOC 2 Requirements
The Trust Services Criteria translated into a program.
→SOC 2 Controls
A control library that survives audit.
→SOC 2 Cost
Decomposed and defensible cost modelling.
→SOC 2 Timeline
Week-by-week engagement plan.
→SOC 2 Readiness
Fixed-fee readiness advisory with costed roadmap.
→SOC 2 Gap Assessment
Ranked remediation register to auditor standards.
→SOC 2 Checklist
The 11-step engagement plan we use internally.
→SOC 2 for SaaS
Product-boundary scoped SOC 2 for software companies.
→SOC 2 for FinTech
Aligned to bank sponsor and PCI overlap.
→SOC 2 for Healthcare
Integrated with HIPAA; HITRUST bridge ready.
→ISO 27001
A certifiable ISMS aligned to Annex A controls.
→ISO 27701
Privacy Information Management extension to ISO 27001.
→HIPAA
Safeguards for covered entities and business associates.
→GDPR
Lawful basis, DPIAs, and Article 30 records.
→
02
Advisory & GRC
Programs that hold up across audits, deals, and regulators.
03
Technical Security
Offensive and defensive engineering, delivered by senior operators.
Engage
Not sure where to start?
A forty-five minute partner-led call is the fastest way to scope your program. No slide deck. No sales team. Just the questions you should be asking.
Book Consultation