Services
Depth on demand, inside your engagement or on its own
Your vCISO and vDPO decide what is needed. Our specialists deliver it.
8 services
Virtual CISO
- vCISO strategic leadership
- Security posture management
- Security and compliance roadmap
- Regulatory compliance oversight
- Incident response leadership
- Board and stakeholder reporting
- Managing several compliance requirements together
- Staff security training and education
25 services
DPO and data privacy
- Data Protection Officer (DPO)
- Privacy programme set-up
- Privacy by Design frameworks
- Privacy governance, policies and procedures
- Privacy maturity assessment and gap analysis
- Data flow mapping and data inventory
- Data classification
- PII discovery and scanning
- Data protection impact assessments (DPIA)
- Privacy impact assessments (PIA) for new products and systems
- Records of processing activities (RoPA)
- Legitimate interest assessments
- Consent management and preference centres
- Cookie audits and consent platform set-up
- Privacy notices
- Data subject and data principal rights requests
- Cross-border data transfers
- Vendor privacy risk assessments
- Privacy incident and breach notification support
- Regulatory liaison
- Privacy training for staff, managers and leadership
- DPDP Act (India)
- GDPR (Europe)
- CCPA and HIPAA (US)CCPAHIPAA
- PIPEDA (Canada)
8 services
Enterprise risk management
- Risk management
- Enterprise risk assessment
- Risk register and ownership mapping
- Qualitative and quantitative risk analysis
- Risk treatment and control design
- GRC integration
- Key risk indicators and continuous monitoring
- Third-party risk management
8 services
Internal audit
- Internal audit
- IT and cybersecurity audits
- ITGC and application control reviews
- Compliance and privacy audits (ISO 27001, ISO 42001, GDPR, DPDP Act)
- Cloud infrastructure and configuration audits
- Vendor and third-party risk assessments
- Business continuity and DR controls review
- Operational and financial process audits
16 services
AI security and governance
- AI governance
- AI governance framework (ISO 42001 and NIST aligned)
- AI risk and impact assessments
- Algorithmic impact assessments
- AI policies and acceptable-use standards
- Generative AI and LLM governance controls
- AI lifecycle governance
- Ethics, transparency and explainability
- Third-party and vendor AI governance
- ISO 42001 certification
- LLM and AI penetration testing
- Prompt injection testing
- Data leakage and training-data exposure testing
- AI supply chain and API misuse testing
- Vector database attack testing
- Safe AI-use awareness for staff
10 services
Assessments and reviews
- Security assessments
- Security architecture review
- Infrastructure review
- Firewall configuration review
- Firewall rule-set review
- Active Directory configuration review and testingReviewTesting
- Threat review and threat modelling
- Software composition analysis
- Application security and DevSecOps
- Professional services
5 services
Offensive security and response
3 services
Security awareness
Not sure who owns your security and privacy today?
That is usually the answer. Book a 30-minute gap review.
Book a gap review