Discuss your needs
Keep a compact overview of our services and engagement approach.
We prepare your organisation and coordinate with an independent certification body where applicable. The independent body performs the assessment and makes the certification decision. Our services combine certification delivery, compliance implementation and security testing for AI, applications, APIs, OT and code.
Manage multiple standards and regulations. Automatically create mandatory documents and reports. Collect evidence and manage reviews.
Security testing for AI systems, web applications, APIs, operational technology and source code—with findings connected to practical remediation.
Testing aligned with OWASP guidance for LLM and Agentic AI applications, ISO/IEC 27090 and MITRE ATLAS, tailored to the system in scope.
Scope, evidence preparation and remediation through the independent assessment process.
Discuss assurance readiness →Data mapping, privacy procedures, responsibility allocation and evidence of implementation.
Discuss privacy requirements →Scope → Gap assessment → Implementation → Internal audit → External assessment → Finding closure → Certification decision
Applicability, editions and deliverables are agreed for each engagement. Certification and attestation decisions remain with the relevant independent bodies. NIST CSF maturity reviews use an agreed assessment method, not a NIST-issued certification.
Explore our readiness, assessment and testing services. Each engagement is tailored to its scope and outcome.
Define the ISMS boundary and information assets. Explore our approach and typical engagement activities.
Explore support ↗02 / Privacy managementISO 27701Identify processing roles, personal data and management-system scope. Explore our approach and typical engagement activities.
Explore support ↗03 / AI managementISO 42001Inventory AI systems, stakeholders and intended uses. Explore our approach and typical engagement activities.
Explore support ↗04 / Quality managementISO 9001Define products, services, interested parties and quality scope. Explore our approach and typical engagement activities.
Explore support ↗05 / Business continuityISO 22301Define critical activities and continuity scope. Explore our approach and typical engagement activities.
Explore support ↗06 / Customer assuranceSOC 2Agree the service organisation boundary and applicable trust services criteria. Explore our approach and typical engagement activities.
Explore support ↗07 / Cloud assuranceCSA STAR 1Identify cloud services, scope and the relevant Cloud Controls Matrix. Explore our approach and typical engagement activities.
Explore support ↗08 / Cloud assuranceCSA STAR 2Select the certification or attestation route and scope cloud services. Explore our approach and typical engagement activities.
Explore support ↗09 / Privacy readinessDPDPAMap personal data processing, purposes and parties. Explore our approach and typical engagement activities.
Explore support ↗10 / Privacy readinessSAUDIMap personal data, processing purposes and local roles. Explore our approach and typical engagement activities.
Explore support ↗11 / Privacy readinessUAEIdentify processing activities and applicable UAE jurisdiction. Explore our approach and typical engagement activities.
Explore support ↗12 / Privacy readinessQATARMap personal data, processing activities and parties. Explore our approach and typical engagement activities.
Explore support ↗13 / Cybersecurity frameworkNESAIdentify applicable UAE information assurance obligations and scope. Explore our approach and typical engagement activities.
Explore support ↗14 / Cybersecurity frameworkNIAConfirm applicability and the relevant Qatar requirements. Explore our approach and typical engagement activities.
Explore support ↗15 / Cybersecurity frameworkNIST CSFDefine scope, business context and stakeholder priorities. Explore our approach and typical engagement activities.
Explore support ↗16 / Security and privacy controlsNIST 800-53Define system boundary, applicable baseline and tailoring assumptions. Explore our approach and typical engagement activities.
Explore support ↗17 / Regional requirementsLOCALIdentify the relevant regulator, sector and jurisdiction. Explore our approach and typical engagement activities.
Explore support ↗18 / Security testingAIAgree authorised AI applications, agents, data and test boundaries. Explore our approach and typical engagement activities.
Explore support ↗19 / Security testingVAPTAgree written authorisation, applications, accounts and testing windows. Explore our approach and typical engagement activities.
Explore support ↗20 / Security testingAPIAgree authorised APIs, environments, credentials and test data. Explore our approach and typical engagement activities.
Explore support ↗21 / Security testingOTAgree asset scope, safety constraints, contacts and stop conditions. Explore our approach and typical engagement activities.
Explore support ↗22 / Security testingCODEAgree repositories, branches, languages and access boundaries. Explore our approach and typical engagement activities.
Explore support ↗23 / Compliance technologyMCMOur application is included with services and also available for purchase.
Explore support ↗Independent bodies make certification and attestation decisions. Framework readiness, testing and legal compliance are distinct outcomes.