Data protection & governance
Governance you can actually operate.
Data security, governance, risk and compliance delivered as practical, tailored solutions — including an outsourced Data Protection Officer where a full-time hire is not justified.
Data security, governance, risk and compliance services delivered as practical, tailored solutions rather than documentation that satisfies a template and nobody else.
We work with you to establish what data you hold, where it lives, who is accountable for it and what obligations attach to it — then build the policies, controls and reporting that let you demonstrate it with confidence.
Who this is for
- Organisations facing GDPR exposure without in-house expertise
- Groups needing ISO 27001 for procurement or tender qualification
- Businesses holding customer data across multiple jurisdictions
- Boards that need data governance to be evidenced, not asserted
- Companies preparing for due diligence ahead of investment or exit
Where the assessment uncovers live adversarial exposure, our cyber security practice can act on it directly rather than handing you a report.
In detail
What the work covers.
Outsourced DPO-as-a-Service
An experienced Data Protection Officer on call, without the cost of a full-time appointment. Covers regulatory liaison, impact assessments, breach response and board reporting, scaled to the size of the organisation.
GDPR gap analysis and information systems audit
A structured review of where you stand against GDPR and adjacent regimes, expressed as a prioritised remediation plan rather than a compliance score. Includes an information systems audit covering data flows, processors and retention.
Data security and GDPR policies and procedures
The operational layer: policies, procedures, records of processing, retention schedules and subject-rights workflows that staff can follow and auditors can test.
ISO 27001 certification for information security management
Support through the full certification cycle — scope definition, risk assessment, statement of applicability, control implementation and the internal audit before the external one.
Ongoing governance and reporting
Risk and compliance reporting cadence for the board, with the metrics that evidence control effectiveness instead of activity.
Other disciplines
Often combined with.
Tell us what you are trying to change.
A short note is enough to start. We will respond within one business day.