What is the Statement of Applicability in ISO 27001?
The Statement of Applicability (SoA) is one of the mandatory documents that you will need to complete when implementing your ISO 27001 In...
GDPR, DPA18 & Best Practice
We can help you improve your data protection and privacy working practices and ensure that you meet your ongoing compliance and contractual obligations
Governance, Risk & Compliance
Whether you need to improve your security posture, implement policies, manage risks or meet specific standards, we can help you meet your objectives
ISO 27001: 2013 Certification
We can help you achieve ISO 27001: 2013 certification, support and manage your ISMS, provide internal auditing and ensure you satisfy your surveillance audits
Advisory services including strategy, policy, impact assessments, risk, governance and compliance
Gap analysis and get well advice for GDPR, ISO27001, Cyber Essentials, NIST and best practice
Tailored onsite training or rolling awareness programmes covering GDPR, privacy or security
Data protection and information security support and management, including DPO-as-a-Service
Privacy and security policy framework development and drafting, including procedures, standards and records
Internal adequacy and compliance audits, covering GDPR, ISO 27001, information security and RTS
Supply chain, technology, procurement and M&A data protection and security due diligence reviews
Vulnerability scanning, penetration testing, web application testing and secure configuration reviews
Consultancy services delivered against an agreed statement of work over a fixed number of days on a time and expenses basis.
We’ll agree the days and rate with you upfront. If the scope needs to change, we’ll discuss it with you and agree the best way forward. You’ll get no surprises and we typically deliver more days than we charge for.
Fixed price engagements, in which we agree a programme of work to be delivered over an agreed period of time, without counting days and time.
We’ll work with you at the outset to scope the project requirements in detail and to identify the assumptions and dependencies. Longer projects will be broken in to agreed phases and details documented in a statement of works.
Our DPO, data protection support, data breach retainer and other support and management services are delivered over 12 months for a fixed monthly fee.
This provides you with access to specialist expertise and knowledge as you need it with cost certainty. Our subscription services are detailed in a service agreement and we become an extended member of your team.
If you’ve had a data breach, are confused about DPOs, have a security questionnaire to answer or just want a chat, please give us a call or email us. We promise no hard sell and only real world guidance.
We love to talk privacy and security and we’d be delighted to discuss your requirements. If we can’t help for any reason, we’ll probably know someone who can.
Get In Touch