Services

From audit readiness to hands-on technical work.

Engage us for a single assessment or a longer program. Each engagement has an agreed scope, clear deliverables and a named point of contact.

A · Compliance & audit readiness

SOC 2 Readiness

Prepare for SOC 2 Type 1 and Type 2 reports: scoping, gap assessment, remediation and evidence.

Design and operate an ISMS that is ready for an independent ISO/IEC 27001 certification audit.

ePHI mapping, risk analysis support and safeguards review for healthcare technology providers.

Practical policies with clear owners, approval, communication and periodic review.

B · Security advisory

Fractional security leadership: strategy, risk register, governance and management reporting.

C · Security assessments

Identity, configuration, exposure, logging and governance reviews for AWS and Microsoft Azure.

Architecture, firewall, remote access, wireless and hardening reviews for local and connected networks.

Scoped, authorized testing of web applications, APIs, networks and cloud, with retesting where agreed.

Secure code review, threat modeling, CI/CD and supply chain review, and secure SDLC guidance.

D · Security programs

ISMS support, vulnerability management, secure development and security awareness are delivered through the pages below and our platforms.

Operate your ISMS between audits: risk reviews, internal audit and management review support.

Process design for triaging and fixing vulnerabilities, and a practical secure SDLC.

Help employees, managers, IT teams and developers make better security decisions.

Describe your situation and we will suggest where to start.