Security questionnaire answered
A customer's security questionnaire answered from your own practices and evidence.
Standard services
Fourteen pieces of compliance work. Fixed price. Fixed date.
Each one is done the same way every time. A vetted specialist works from a fixed method. I review it. It is released in your client portal on the date you picked. Order online. Pay once.
Start here
The two most companies buy first
ISO 27001 internal audit
An independent ISO 27001 internal audit on a date you book, with a report 5 working days later.
All fourteen
By what your customer or regulator asked for
Privacy
GDPR document pack
Privacy statement, cookie statement, processing register and a data processing agreement template.
A compliance check, not legal advice.DPIA for one processing activity
A data protection impact assessment for one processing activity, from a two-hour session to a signed-off report.
A compliance check, not legal advice.Data processing agreement review
One data processing agreement checked against Article 28 GDPR, with the points to raise.
A compliance check, not legal advice.Security
Security questionnaire answered
A customer's security questionnaire answered from your own practices and evidence.
Information security policy pack
Eight information security policies written for your organisation, aligned to ISO 27001.
Information security risk assessment
A three-hour risk session with your team, a risk register and a treatment plan.
Incident response plan and exercise
An incident response plan for your organisation and a tabletop exercise to test it.
Security awareness session
A 90-minute online awareness session for up to 25 staff, with an attendance record.
Audit
ISO 27001 internal audit
An independent ISO 27001 internal audit on a date you book, with a report 5 working days later.
ISO 42001 internal audit
An independent ISO 42001 internal audit on a date you book, with a report 5 working days later.
Management review, prepared and minuted
Your yearly management review prepared, chaired and minuted as the standard requires.
Regulation
NIS2 and Cyberbeveiligingswet scan
Whether NIS2 and the Cyberbeveiligingswet apply to you, and the gaps against the required measures.
A compliance check, not legal advice.EU AI Act classification
Up to three AI systems classified under the EU AI Act, with your role and the obligations that follow.
A compliance check, not legal advice.DORA gap scan
A gap scan against DORA for financial entities and their ICT suppliers.
A compliance check, not legal advice.How a standard service runs
Four steps, every time
- 01
Order and intake
Order online. Answer the intake questions. Ten minutes.
- 02
Pick your date
A start date at least three working days ahead, or a session date for the ones with a live session.
- 03
A specialist does the work
From a fixed template for that product. One round of changes is included.
- 04
I review and release
Nothing reaches your portal unreviewed. You get a notice when it is there.