01 · Framework assessments
An independent view of where you stand
We assess your controls against the framework you need, scoring maturity safeguard by safeguard from interviews, evidence review and live data from your environment.
✓
Scored against your targetMaturity and implementation status for every control, against the level you need to reach.
✓
Evidence from the platformPulse and Trace data supports each score, so it reflects what is running, not what the policy says.
✓
Cross-framework mappingOne assessment maps to ISO 27001, CIS 18, NIST CSF, CAF and others, so you do the work once.
✓
Board-ready outputA full report plus a short board briefing with the decisions you need.
02 · Risk register
A risk register that stays current
Risks are linked to the vulnerabilities, incidents and control gaps behind them, so scores move when your environment changes, not once a year.
✓
Linked to live findingsEach risk connects to Trace findings, Pulse incidents and Attest control gaps.
✓
Inherent and residual scoringLikelihood and impact before and after controls, with a clear owner.
✓
Formal risk acceptanceAccept a risk with a rationale, an expiry date and sign-off recorded.
✓
Review remindersOwners are prompted when a risk is due for review or its inputs change.
03 · Remediation roadmaps
From findings to a plan you can deliver
Gaps become prioritised work packages with owners, timelines and exit criteria, grouped into phases and gated so investment follows results.
✓
Prioritised by riskP1 to P3 packages ranked by impact and maturity gap, not alphabetically.
✓
Owners and datesEvery package has an accountable owner and a target date.
✓
Gated phasesProgress is re-checked at each gate before the next phase is funded.
✓
Tracked to closureFixes verified with evidence, then reflected in your maturity score.
04 · Audit support
Ready when the auditor asks
Evidence is collected continuously and organised by control, so audit preparation takes days rather than months.
✓
Evidence by controlScreenshots, exports and logs stored against the control they prove.
✓
Auditor exportsHand over a structured evidence pack in one click.
✓
Pre-audit reviewWe walk through likely findings before the auditor does.
✓
Support on the dayOur consultants can join audit sessions to answer technical questions.