Evidence

Work, described the way an evaluator reads it.

Some of our work is under NDA and described without naming the client. Where we can name them, we do.

Case study 01

ISO 27001 and GDPR compliance for Sortitt.

Context: Sortitt needed ISO 27001 certification and a working GDPR programme to satisfy the security reviews its customers were running.
What we did: Built the information security management system from scratch, implemented technical controls alongside the engineering team, and delivered the data protection programme alongside it.
Outcome: ISO 27001 certification achieved and a GDPR compliance programme in place, with the evidence pack ready for customer security review.
Stack and frameworks: ISO/IEC 27001, UK GDPR.

Case study 02

Context: Idenfo needed senior security leadership across several frameworks at once, without hiring a full-time CISO.
What we did: Provided fractional CISO leadership covering the ISMS and ISO 27001 programme, GDPR compliance, EU AI Act readiness, penetration testing, secure code review and IT service management.
Outcome: A single accountable security lead across ISO, GDPR, EU AI Act and technical assurance, delivered on a fractional basis.
Stack and frameworks: ISO/IEC 27001, UK GDPR, EU AI Act, penetration testing, secure code review, ITSM.

Client conversations

We will introduce you to a client working on something comparable to your problem, before you commit to anything. Ask on the first call.

Next step

Thirty minutes. We will tell you what we would do, what it would take, and whether we are the right firm for it.