Compliance that makes sense.
Boutique information security consulting for startups and small companies that want more than a certificate on the wall.
What we do
Why us
No templates
Every project is different. The processes are yours, not copied from a textbook.
No disappearing
We stay after the audit. The certificate is the beginning, not the end.
No jargon
We speak plain language. If something isn't clear - we haven't explained it well enough.
From the blog
All articles →ISO 27001 Control A.7.4: Physical Security Monitoring
Annex A control 7.4 requires premises to be continuously monitored for unauthorized physical access. How to choose CCTV, alarms and guarding, handle footage lawfully, and show auditors the monitoring actually works.
ISO 27001 Control A.7.5: Protecting Against Physical and Environmental Threats
Annex A control 7.5 requires protection against physical and environmental threats such as fire, flood and other natural or man-made hazards. How to assess site risks, choose proportionate safeguards and test them.
ISO 27001 Control A.7.6: Working in Secure Areas
Annex A control 7.6 requires security measures for working in secure areas to be designed and implemented. How to set rules for staff, contractors and visitors inside server rooms and other restricted spaces.
We work with
Not sure where to start?
Let's start with a conversation - no commitment, no jargon. Even if we're not the right fit, we'll point you in the right direction.
Book a free consultation →