Case Studies

SELECTED
PROJECTS

Governance, risk, compliance and information-security engagements. Client identities are withheld where confidentiality applies.

GRC & Information Security Assessment

GRC / Security Assessment

A structured assessment of governance, risk and information-security posture, mapping existing controls against organizational risk appetite and identifying gaps ahead of formal certification work.

ISO/IEC 27001 Implementation

ISO 27001

End-to-end support for building an Information Security Management System (ISMS) aligned to ISO/IEC 27001:2022, from scoping through to internal audit readiness.

SOC 2 Readiness

SOC 2

Readiness assessment against SOC 2 Trust Services Criteria, preparing control documentation and evidence ahead of a formal Type II audit.

HIPAA Readiness

HIPAA

Assessment of administrative, physical and technical safeguards against the HIPAA Security Rule to prepare a healthcare-adjacent client for compliance review.

Policy & Procedure Documentation

Policy Development

Development of a structured policy and procedure library covering information security, acceptable use, access control and incident response, written to be enforceable and auditable rather than boilerplate.

Risk Assessment

A formal information-security risk assessment identifying, analyzing and prioritizing risk across systems, vendors and business processes to inform treatment decisions and resourcing.