Compliance and audit readiness
Pass your audit, and stay compliant after it.
Audits, insurance renewals and client security questionnaires keep getting harder. We run the whole thing with you: we find the gaps, write the policies, collect the evidence, and sit in on the audit itself.
What's included
Gap assessment
Your current controls measured against the framework you need, with a clear remediation plan.
Policies and procedures
Written for your size and team, covering access, data, incidents and acceptable use.
Evidence collection
Screenshots, logs and records gathered and organized the way auditors expect.
Audit support
We prepare you, answer technical questions and help close any findings.
Questionnaires and insurance
Cyber insurance applications and client security questionnaires completed accurately.
Ongoing compliance management
Quarterly control checks and policy reviews so you stay ready year-round.
Frameworks we support
- SOC 2 and ISO 27001
- PCI DSS
- OSFI B-10
- PHIPA and PIPEDA
- NIST CSF and CIS Controls
- Cyber insurance requirements
Who it's for
- Firms preparing for a first audit or certification
- Businesses asked for security proof by clients or insurers
- Regulated offices in healthcare, finance and legal
What you get
- Gap assessment report
- Policy set and control evidence
- Audit-day support
- Compliance calendar for the year
Start with a 30-minute call
We'll look at how your office runs today and tell you what we'd change first.
More services
- IT consulting and strategyPart-time CIO and CISO leadership, IT roadmaps, budgets and vendor selection.
- IT support and managed servicesUnlimited help desk, patching, monitoring and on-site support for a fixed monthly fee.
- Microsoft 365 hardeningLock down sign-ins, email, sharing and admin rights in Microsoft 365.
- Vulnerability managementWe deploy scanning tools and manage your vulnerabilities from discovery to fix.