Services, people and software for GRC.
Three practices that work on their own or together. Select one to see everything it covers.
GRC Services
Our consultants assess, test and improve your controls, and prepare you for certification and audit.
- ISO 27001 implementation
- ISO internal audit services
- ISO 9001 quality management
- NIST framework assessments
- IT general controls testing
- Business controls testing
Cybersecurity Staffing
Certified GRC, audit and security professionals on contract, contract-to-hire or permanent terms.
- SOC Analyst
- Compliance Officer
- Audit Specialist
- Risk Manager
- Audit Manager
- GRC Analyst
GRC Software
The GRC Lab platform for managing controls, testing, evidence requests and issues in one place.
- Control library
- Workpapers and sampling
- Evidence requests
- Issue register
- Application inventory
- GRC Practice Lab for individuals
How an engagement runs
From first call to lasting results
Understand
We learn your goals, deadlines, systems and the frameworks that apply to you.
Assess
We review current controls and evidence and give you a clear gap report.
Improve
We fix gaps with you: controls, policies, people and tooling.
Sustain
We help you keep evidence current so every audit after the first is routine.
Not sure where to start?
Tell us what you are working towards and we'll recommend the right mix of services.