Compliance that makes sense.
Boutique information security consulting for startups and small companies that want more than a certificate on the wall.
What we do
Why us
No templates
Every project is different. The processes are yours, not copied from a textbook.
No disappearing
We stay after the audit. The certificate is the beginning, not the end.
No jargon
We speak plain language. If something isn't clear - we haven't explained it well enough.
From the blog
All articles →ISO 27001 Control A.5.11: Return of Assets
Annex A control 5.11 requires personnel and other parties to return all organizational assets on change or termination. How to run a leaver process that gets everything back, digital and physical.
ISO 27001 Control A.5.12: Classification of Information
Annex A control 5.12 requires information to be classified by confidentiality, integrity, availability and interested party requirements. How to design a simple scheme people will use.
ISO 27001 Control A.5.10: Acceptable Use of Information and Other Associated Assets
Annex A control 5.10 requires rules for acceptable use and handling of information and assets to be identified, documented and implemented. How to write rules people read and follow.
We work with
Not sure where to start?
Let's start with a conversation - no commitment, no jargon. Even if we're not the right fit, we'll point you in the right direction.
Book a free consultation →