SERVICE / COMPLIANCE ASSURANCE
Government accreditation & compliance
Risk assessment and accreditation grounded in two decades of HMG and ISO 27001 practice.
Book a call ↗WHAT YOU GET
Straight advice.
Real outcomes.
Compliance work done badly produces a binder nobody reads and a system that’s no safer than before. I’ve spent over a decade working inside government risk and accreditation processes — not just advising on them — and I bring that same rigour to ISO 27001 and commercial assurance work.
✦Risk assessment against HMG & ISO 27003 methods
✦ISO 27001 readiness, gap analysis & ISMS development
✦Accreditation strategy & documentation
✦ITHC oversight and remediation planning
✦Policy, standards & work instruction development
That includes risk assessment using HMG methodologies and ISO 27003, building Information Security Management Systems from scratch, and taking organisations through ISO 27001 certification — including cases where certification was achieved first time, against tight deadlines.
I also have direct experience overseeing IT Health Checks and remediation, translating technical pen test findings into a prioritised, fundable plan rather than a wall of red risk ratings nobody has time to fix.
Gap analysis
Assess where you stand against the standard or accreditation you’re targeting.
Build the ISMS
Develop the policies, risk assessments and evidence base that will actually hold up to audit.
Certify & sustain
Support you through certification, then help build the habits that keep it live year to year.
READY WHEN YOU ARE