Fragmented ownership
Clear accountability for governance, risk and assurance across technology, cyber and AI.
Independent GRC consultancy
GRC that boards can trust and teams can use.
Independent advice for organisations of any size, sector or location that need clearer ownership, workable controls and evidence they can stand behind.
Independent · Works worldwide · ISO 27001 / 42001 readiness
Typical engagement focus
What organisations ask us to solve.
If one of these is familiar, a short consultation is usually the clearest next step.
Controls that look good on paper
Practical frameworks and policies people can follow — with evidence ready when asked.
AI sitting outside GRC
AI risk brought into existing GRC structures: assessment, policy, lifecycle and readiness.
How engagements start
Clear offers. Clear next steps.
Start with a focused diagnostic. Expand into implementation and ongoing support when the path is clear.
- Consultation
- Health Check
- Project
- Retainer
Entry offer
GRC Health Check
A focused review of your governance, risk and control landscape — ownership, gaps and priorities.
- Discovery conversation
- Document and stakeholder review
- Maturity snapshot across key GRC areas
- Prioritised findings call
Deliverable: Written Health Check report + recommended next steps
From £1,500
Organisations that need clarity before a larger programme
Start a GRC Health CheckEntry offer
AI Governance Health Check
Identify the governance and risk gaps created by AI adoption — without treating AI as a separate island.
- AI use-case and ownership review
- Governance and risk gap snapshot
- Link back to your wider GRC system
- Prioritised findings call
Deliverable: AI Governance Health Check report + roadmap outline
From £1,500
Teams adopting GenAI or AI-enabled products
Start an AI Health CheckFollow-on
Assurance & ISO Readiness
Prepare for audit, ISO/IEC 27001 or ISO/IEC 42001 readiness with practical evidence — not theatre.
- Gap assessment against chosen standard
- Evidence and control review
- Implementation roadmap
- Board-ready summary
Deliverable: Gap assessment + implementation roadmap
Scoped after discovery
Organisations preparing for assurance or certification support
Discuss ISO readinessServices
GRC is the foundation. AI Governance is the specialist line.
Start with a Health Check when you need a focused diagnostic. Explore the full service when the problem is broader.
Independent GRC advice that boards can trust and operating teams can use.
Independent
Advice without a product to sell.
International
We work with organisations wherever they operate.
Evidence-led
Controls and documentation that stand up to scrutiny.
Consultation-first
Start with a focused conversation, not a package pitch.
Who we help
If the organisation has to govern risk, we can help.
We work with organisations of any size, sector and location. The GRC approach stays consistent: clearer ownership, proportionate controls, and evidence people can stand behind.
Next step
Tell us what you are trying to solve.
A short consultation is usually enough to identify whether a Health Check, a broader GRC piece, or specialist AI governance is the right start.