Compliance that makes sense.
Boutique information security consulting for startups and small companies that want more than a certificate on the wall.
What we do
Why us
No templates
Every project is different. The processes are yours, not copied from a textbook.
No disappearing
We stay after the audit. The certificate is the beginning, not the end.
No jargon
We speak plain language. If something isn't clear - we haven't explained it well enough.
From the blog
All articles →ISO 27001 Control A.7.7: Clear Desk and Clear Screen
Annex A control 7.7 requires clear desk and clear screen rules to be defined and enforced. How to set practical rules for paper, removable media and unattended screens.
ISO 27001 Control A.7.8: Equipment Siting and Protection
Annex A control 7.8 requires equipment to be sited securely and protected. How to place servers, screens and devices to cut environmental, access and eavesdropping risks.
ISO 27001 Control A.7.4: Physical Security Monitoring
Annex A control 7.4 requires premises to be continuously monitored for unauthorized physical access. How to choose CCTV, alarms and guarding, handle footage lawfully, and show auditors the monitoring actually works.
We work with
Not sure where to start?
Let's start with a conversation - no commitment, no jargon. Even if we're not the right fit, we'll point you in the right direction.
Book a free consultation →