Audit & Advisory GRC
Align cybersecurity with business, regulatory and risk priorities, with deliverables your executive team can act on directly.
Steer cybersecurity, continuously.
We align your security with risk and regulation — assess, build, prove, improve — with deliverables your executive team can act on directly.
Services in detail
Governance and strategy
Defining the cybersecurity strategy, the policies and the organisation.
Risk management and assessment
Identifying, evaluating and treating risk using recognised methodologies.
Audit and gap analysis
Assessing maturity and gaps against the frameworks you are targeting.
Compliance and regulation
Support on ISO 27001, NIST CSF, the Swiss ICT Minimum Standard, NIS2, DORA, GDPR and FADP.
Table top exercises (TTX)
Crisis simulation exercises to test coordination and decision-making.
Response plans & playbooks (IRP)
Formalising incident response procedures.
BCP, BIA & DRP
Business continuity, impact analysis and disaster recovery.
Deliverables & approach
- Deliverables aimed at decisions
- Recognised frameworks and standards
- A pragmatic approach, fitted to the business
- Support over the long term
This service in practice
Let's talk about your scope.
A technical conversation, with no commitment, to frame your need and propose the most relevant engagement.