Compliance & Regulatory Framework Services
Expert compliance consultancy for ISO 27001, Cyber Essentials, DORA, NIS2, GDPR, PCI DSS, and SOC 2. Certified lead implementers and former Big 4 advisors.
Frequently asked questions
Which compliance frameworks do you support?
We provide consultancy for ISO 27001, Cyber Essentials and Cyber Essentials Plus, DORA, NIS2, GDPR, PCI DSS, and SOC 2, from initial gap assessment through to certification and ongoing maintenance.
How long does ISO 27001 certification take?
For most organisations, ISO 27001 certification takes around 3-6 months depending on size and maturity. Our certified lead implementers run a gap assessment, build your ISMS, and guide you through the certification audit.
Do we need Cyber Essentials for UK government contracts?
Yes. Cyber Essentials is mandatory for many UK public sector contracts, and Cyber Essentials Plus adds an independent technical audit. We provide full support to achieve both efficiently.
What is the difference between DORA and NIS2?
DORA focuses on digital operational resilience for EU financial services, while NIS2 raises cyber security requirements across a broad range of essential and important entities. We help you understand which apply and achieve compliance with each.
Can you both advise on and implement the controls?
Yes. Beyond gap assessments and documentation, our consultants help implement the technical and organisational controls, drawing on the full breadth of our security services to close gaps, not just identify them.