Compliance should help you win work. Not hold it up.
A customer wants evidence before signing. Your policy says “approved tools only”, but the team has already found three others. You need an honest answer and a way to close the gap. We help bring the controls, documentation and training into line with the way you work. Agree the scope and fees before starting, then work towards your SOC 2, HIPAA, ISO 27001 or Cyber Essentials requirement.
The policy says one thing. The team does another.
“Approved tools only” is difficult to follow when nobody knows which tools are approved. We help turn policy statements into named tools, data rules, responsible owners and evidence of the checks being carried out. The aim is a process your team can follow during the day job.
Discuss your requirementsPrepare for the requirement in front of you.
SOC 2 readiness
Map the controls to your scope, assign owners and organise evidence. Prepare for your independent CPA examination and customer security reviews.
HIPAA readiness
Review how health information is handled. Identify security gaps, prepare policies and risk documentation, and train staff on their responsibilities.
Cyber Essentials
Work through the technical requirements, check your current configuration and address gaps before submitting to your certification provider.
ISO 27001 readiness
Build an information security management system around your organisation. Prepare the risk register, policies, control evidence and people for an independent certification audit.
AI use and data handling
Decide which tools staff and developers can use, what data stays out and who reviews generated work. Bring those decisions into the risk register, policies and evidence.
Customer questionnaires
Prepare accurate answers backed by evidence. Identify what is missing, who owns it and what needs to be resolved before you respond.
From working practice to audit evidence.
First, understand how the work happens. Then agree the controls, put them into practice and keep the evidence. Each step has an owner.
Scope
Agree the tools, data and requirements to review.
Assess
Check what is in place and where the gaps are.
Evidence
Record the checks and prepare for independent review.
Implement
Agree the changes, policies and responsible owners.
FAQ
Compliance questions, answered.
Which compliance framework should we start with?
Start with what your customers, contracts or partners are asking for. We help you compare those requirements with your business, the data you handle and what is already in place. If you need more than one framework, we identify shared controls and evidence to avoid duplicating work.
Do you provide certification?
We help with readiness, implementation and audit preparation. Where an independent audit or certification is required, the relevant auditor or certification body carries it out. Our consultancy fees are separate from their fees.
Can you work with our existing policies and controls?
Yes. We review what you already have, keep what is useful and focus on the gaps. Existing policies, risk assessments and evidence give us a starting point. We can also scope a standalone questionnaire, gap assessment or policy review if you do not need a full programme.
How long will it take, and what will our team need to do?
The timeline depends on your scope, current gaps, assessment dates and the time your team can commit. You will need a coordinator and people who can explain your systems, approve decisions and put changes into practice. We agree a realistic plan with milestones, owners and expected time commitments before starting.
What will we receive?
Depending on the agreed scope, deliverables can include a gap assessment, prioritised action plan, policies, risk register, organised evidence and audit preparation support. We confirm exactly what is included before work begins.
What will it cost?
The cost depends on your scope, current controls and the support you need. We agree the deliverables and fees before starting, and clarify which external audit, assessment or certification costs sit outside our proposal.
Let's get your compliance requirements sorted.
Tell us which framework or customer requirement you're working towards, your deadline and what you already have in place. We'll help you work out the next steps.
Let's get your compliance requirements sorted.
Tell us which framework or customer requirement you're working towards, your deadline and what you already have in place. We'll help you work out the next steps.
Compliance shouldn't be a guessing game.
Whether you're preparing for an audit, responding to a customer requirement or starting from scratch, we'll help you understand what's needed and how to get there.
Discuss your requirements