What we do
Nine services, one senior point of contact
Each service stands alone, and most clients combine two or three: certification or assessment readiness first, then a retainer or managed service to keep it running.
Virtual and fractional CISO
A senior security leader on retainer, scaled to the size of your business.
Learn more
Virtual and fractional CTO
Technology direction without an executive hire: architecture, cloud, roadmap and suppliers.
Learn more
ISO/IEC 27001 certification
From gap assessment to certificate, with an ISMS that fits your business.
Learn more
Australian Government compliance
The overview: IRAP readiness, Essential Eight and ASD Essentials, PSPF and ISM alignment, and Managed RFFR.
Learn more
IRAP assessment readiness
Walk into your IRAP assessment with controls mapped, gaps closed and evidence ready.
Learn more
Essential Eight and ASD Essentials
Essential Eight maturity assessment and uplift, and migration to ASD's new Essentials series on a single evidence base.
Learn more
Managed RFFR
Right Fit For Risk compliance as a service: the ISMS, evidence, internal audits and the accreditation cycle, run for you.
Learn more
Internal audit and integrated management systems
Independent internal audits and one management system across ISO 27001, 9001, 14001 and 45001.
Learn moreDigital transformation and automation
Business process automation on Microsoft Power Platform, with security designed in.
Learn moreWays to engage
Project, retainer or managed service
Project
A fixed scope and price for a defined outcome: a gap assessment, an ISMS build, an internal audit, an IRAP readiness pack.
Retainer
A set number of days a month for virtual CISO or CTO work, reported monthly and adjusted as your needs change.
Managed service
We run the system for you: evidence, audits, reviews and the accreditation cycle, as with Managed RFFR.
Not sure which service fits?
Send us the clause, questionnaire or letter you need to satisfy and we will map it to the right engagement.