Discuss your needs
ISO 27001 · 27701ISO 42001 · 9001 · 22301SOC 2 · CSA STARAI security · VAPT · OTPrivacy · Micro Compliance ManagerExpert support for certification readiness, privacy, security testing and the evidence behind your commitments.
Explore our readiness, assessment and testing services. Each engagement is tailored to its scope and outcome.
Define the ISMS boundary and information assets. Explore our approach and typical engagement activities.
Explore support ↗02 / Privacy managementISO 27701Identify processing roles, personal data and management-system scope. Explore our approach and typical engagement activities.
Explore support ↗03 / AI managementISO 42001Inventory AI systems, stakeholders and intended uses. Explore our approach and typical engagement activities.
Explore support ↗04 / Quality managementISO 9001Define products, services, interested parties and quality scope. Explore our approach and typical engagement activities.
Explore support ↗05 / Business continuityISO 22301Define critical activities and continuity scope. Explore our approach and typical engagement activities.
Explore support ↗06 / Customer assuranceSOC 2Agree the service organisation boundary and applicable trust services criteria. Explore our approach and typical engagement activities.
Explore support ↗07 / Cloud assuranceCSA STAR 1Identify cloud services, scope and the relevant Cloud Controls Matrix. Explore our approach and typical engagement activities.
Explore support ↗08 / Cloud assuranceCSA STAR 2Select the certification or attestation route and scope cloud services. Explore our approach and typical engagement activities.
Explore support ↗09 / Privacy readinessDPDPAMap personal data processing, purposes and parties. Explore our approach and typical engagement activities.
Explore support ↗10 / Privacy readinessSAUDIMap personal data, processing purposes and local roles. Explore our approach and typical engagement activities.
Explore support ↗11 / Privacy readinessUAEIdentify processing activities and applicable UAE jurisdiction. Explore our approach and typical engagement activities.
Explore support ↗12 / Privacy readinessQATARMap personal data, processing activities and parties. Explore our approach and typical engagement activities.
Explore support ↗13 / Cybersecurity frameworkNESAIdentify applicable UAE information assurance obligations and scope. Explore our approach and typical engagement activities.
Explore support ↗14 / Cybersecurity frameworkNIAConfirm applicability and the relevant Qatar requirements. Explore our approach and typical engagement activities.
Explore support ↗15 / Cybersecurity frameworkNIST CSFDefine scope, business context and stakeholder priorities. Explore our approach and typical engagement activities.
Explore support ↗16 / Security and privacy controlsNIST 800-53Define system boundary, applicable baseline and tailoring assumptions. Explore our approach and typical engagement activities.
Explore support ↗17 / Regional requirementsLOCALIdentify the relevant regulator, sector and jurisdiction. Explore our approach and typical engagement activities.
Explore support ↗18 / Security testingAIAgree authorised AI applications, agents, data and test boundaries. Explore our approach and typical engagement activities.
Explore support ↗19 / Security testingVAPTAgree written authorisation, applications, accounts and testing windows. Explore our approach and typical engagement activities.
Explore support ↗20 / Security testingAPIAgree authorised APIs, environments, credentials and test data. Explore our approach and typical engagement activities.
Explore support ↗21 / Security testingOTAgree asset scope, safety constraints, contacts and stop conditions. Explore our approach and typical engagement activities.
Explore support ↗22 / Security testingCODEAgree repositories, branches, languages and access boundaries. Explore our approach and typical engagement activities.
Explore support ↗23 / Compliance technologyMCMOur application is included with services and also available for purchase.
Explore support ↗Independent bodies make certification and attestation decisions. Framework readiness, testing and legal compliance are distinct outcomes.
From scope and gap assessment to implementation, internal audits and external assessment coordination, we support your organisation through the certification journey.
Our Micro Compliance Manager supports your engagement and is also available for purchase separately.
Agree scope, assess gaps and plan the work for your target standard.
Implement controls, prepare documentation, review evidence and address internal audit findings.
Coordinate the external assessment through certification-body partnerships where applicable and support finding closure.
The independent certification body conducts its assessment and makes the certification decision. Other frameworks may lead to an attestation, assessment or compliance outcome rather than certification.
Use our AI adoption checklist to review approval, data, permissions, testing and operation.
Explore resources →Discuss work packages, certification coordination where applicable, evidence requirements and review responsibilities.
Explore partner delivery →Tell us your target standard, current position and timeline.
Plan your certification →