Governance, risk and compliance
Manage IT risk and meet your obligations with clarity: where you stand, what is missing, and how to close the gap at reasonable cost.
What you gain
A clear view of risk
A prioritized picture of IT and security risk that leaders can act on.
Gaps you can close
A comparison with good practice shows what is missing and what to do next.
Policies people follow
Policies and procedures written for how your organization really works.
Evidence of control
Technical compliance checks show whether systems follow your standards.
How we deliver
The steps we follow for this service.
Assess the current state
We review your governance, risks and controls against good practice and your requirements.
Define the target
We agree where you need to be and prioritize the gaps.
Implement
We help you put the policies, processes and technical controls in place.
Check and report
We check how systems comply and report progress to your stakeholders.
What's included
Risk assessment
Identify and rate the risks to your systems and data, with a plan to reduce them at the lowest cost.
Gap analysis
Compare your controls with recognized frameworks and good practice, and see what is missing.
Policies and procedures
Security policies and procedures matched to your business and your technology.
Technical compliance checks
Scanning of infrastructure and web applications against your configuration standards, with tools such as Nessus and Qualys.
Key capabilities
Technologies we work with
- Nessus
- Qualys
What you receive
- A risk assessment with priorities
- A gap analysis against the framework you choose
- Policies and procedures tailored to you
- Compliance check results and a plan to close the findings
Need help with governance, risk and compliance?
Tell us about your environment and what you want to achieve, and we will reply with how we would approach it.