← Back to Services
Governance, Risk & Compliance
Risk and governance grounded in how your organization actually operates, not a generic template.
Policies, frameworks, and risk management grounded in real operations — technical governance only, not a substitute for legal advisory.
What this can include
Governance frameworks
- Information security and IT governance
- ISO/IEC 27001, 27002, and 27005
- NIST CSF and CIS Controls
Risk management
- Risk management and third-party risk
- Policy and procedure development
- Privacy by Design and by Default (including LOPDP, from a technical perspective)
Continuity
- Business continuity planning and business impact analysis (BIA)
- Disaster recovery planning
Let's talk
Scope, duration, modality, and deliverables are defined per engagement: an assessment, a project, recurring advisory, a block of hours, an audit, selective hands-on execution, or bringing me on full-time as in-house staff. No fixed pricing is published here; let's talk about what fits.
Ask about this service