Services
Governance, Risk and Compliance
A standard earns its keep when it changes how you run. We turn ISO 27001, Cyber Essentials and NIS2 into a programme your organisation can live with, and we can hold the security leadership seat while you build the function or hire for it.
What the Work Covers
- Gap assessments against ISO 27001, Cyber Essentials, Cyber Essentials Plus and NIS2
- Information security management system design: policies, the risk method and the statement of applicability
- Risk registers and treatment plans the board can own
- Supplier and third party security assessment
- Fractional security leadership: a senior security lead for an agreed number of days a month
What You Receive
- A gap report with the effort and the order of work
- Policies and processes written around how your organisation actually works
- Support through the external audit with your chosen certification body
Who It Is For
Organisations facing a customer requirement, a tender, a regulator or a board that wants a credible security programme.
How It Starts
Tell us the standard or requirement, your deadline and roughly how large the organisation is. We will come back with the questions we would ask first.
Every engagement is scoped and contracted before work starts: what is in scope, what it costs, who does the work and when you will have the results.
Write to solutions@greywellcyber.com, or see the contact page.