ISO/IEC 27001 — Information Security
Your clients hand over sensitive data and expect it protected — and increasingly, they ask you to prove it. We start with a clear picture of where you stand today, then work alongside your team step by step: closing gaps, building the policies and controls that actually fit how you work, and preparing you thoroughly before the real audit. From gap analysis to the certification decision, you’re never navigating ISO 27001 alone — we’re with you at every stage, until the certificate is in hand.
Our role
We guide the entire process, start to finish — from the initial gap analysis and risk assessment through building your documentation, training your team, and running the internal audit. You get one point of contact, a clear timeline, and hands-on support at every stage, right through the certification audit itself.
What You Get
A certifiable information security management system — risk register, treatment plan, and ISO 27001-aligned policies your team actually follows. Proof for clients and tenders that their data is handled properly, and an audit-ready file when the certification body walks in.
ISO 42001 — AI Management
AI is moving faster than most organizations can govern it — and clients, regulators and partners are starting to ask how you control it. We start with a clear picture of where your AI use stands today, then work alongside your team step by step: closing gaps, building the governance framework and controls that actually fit how you use AI, and preparing you thoroughly before the real audit. From gap analysis to the certification decision, you’re covered.
Our role
We guide the entire process, start to finish — from the initial gap analysis and AI risk assessment through building your governance documentation, training your team, and running the internal audit. You get one point of contact, a clear timeline, and hands-on support at every stage, right through the certification audit itself.
What You Get
A defensible AI governance framework — documented risk assessments, oversight controls, and clear accountability for every AI system you run. A credible answer when clients, partners or regulators ask how you manage AI risk, and a head start on incoming EU AI Act obligations.
NIS2 Compliance
NIS2 brings binding cybersecurity obligations for medium and large companies across critical sectors — with direct management liability and real penalties for getting it wrong. We run a structured, control-by-control gap assessment against the NIS2 minimum security measures, scoring your current maturity and mapping exactly where you stand. You walk away with a prioritized roadmap — quick wins, medium-term and long-term — so your team knows precisely what to fix and in what order.
Our role
We assess your organization against every required NIS2 measure — reviewing policies and systems, and interviewing your key teams — then score your maturity control-by-control. You get a clear, prioritized picture and a workshop with your management team to walk through the findings and next steps.
What You Get
A detailed gap assessment report — maturity scores, risk-prioritized findings, and a remediation roadmap split into quick wins, medium-term and long-term actions. Everything your team (or a specialized technical provider) needs to close the gaps, without paying for implementation you don’t need from us.
ISO 20000-1 — IT Service Management
Clients and partners increasingly expect proof that your IT services are reliable, consistent and properly managed — not just promised. We start with a clear picture of where you stand today, then work alongside your team step by step: closing gaps, building the service management processes and controls that actually fit how you operate, and preparing you thoroughly before the real audit. From gap analysis to the certification decision, you’re covered.
Our role
We guide the entire process, start to finish — from the initial gap analysis and risk assessment through building your documentation, training your team, and running the internal audit. You get one point of contact, a clear timeline, and hands-on support at every stage, right through the certification audit itself.
What You Get
A certifiable IT service management system — process documentation, service level controls and an internal audit trail mapped to ISO 20000-1. Proof for clients and tenders that your service delivery is consistent and under control, and an audit-ready file when the certification body walks in.