
ISO 27001
Build an ISMS that supports demonstrable controls, ongoing improvement and certification readiness.
- Gap analysis and implementation
- Internal audits and ISMS maintenance
- Evidence, readiness and continuous improvement
ISO 27001, NIS2 and AI governance bring requirements, risks and decisions. Governancy helps you understand where you stand, what is demonstrably in place and what deserves priority. Senior guidance from initial assessment through implementation and audit.
20 minutes · no obligation · usually a reply within one business day
We turn complex requirements into practical measures, so you can manage risk, clarify accountability and demonstrate compliance.

Build an ISMS that supports demonstrable controls, ongoing improvement and certification readiness.

Translate obligations and board accountability into a clear scope, measures and supporting evidence.

Manage AI risks, responsibilities and the systems in use before informal use becomes organisational policy.
A full implementation is not always needed. An ISO 27001 gap analysis, NIS2 gap analysis or AI governance assessment shows what already works, where evidence is missing and which steps deserve priority. You decide what happens next.
ISO/IEC 27001
See where the ISMS stands against ISO 27001 and what is still missing.
Outcome: gaps, priorities and a practical improvement route.
See approach & outcome →NIS2
Establish applicability, governance gaps and priority cybersecurity measures.
Outcome: a management-ready gap view and prioritised implementation route.
See approach & outcome →AI Governance
Map AI use, ownership, risk and missing governance before formalising the system.
Outcome: baseline, priorities and a proportionate governance route.
See approach & outcome →Find out which topics may need attention in your organisation. No email address, no registration and no invented compliance score.
Take the free self-checkIndicative first exploration.
A useful first assignment delivers a decision-ready overview: what was assessed, where evidence is missing, who owns the risks and what should happen next.
Illustrative report layout · no actual client data
Governancy combines cybersecurity leadership with expertise in information security, auditing and legal compliance. We translate complex requirements into clear priorities and practical next steps.
Executive experience in cybersecurity, certified ISO 27001 Lead Auditor expertise and legal knowledge from private legal practice.
You work directly with experienced specialists, with clarity from the start about who will deliver your engagement.
Concrete findings, clear priorities and implementable measures that move your organisation forward.

Managing Partner · Lead Auditor

Legal & Compliance
In a short, entirely no-obligation conversation, we explore your objective, what is already in place and the most sensible first step.