Experience

Independent work. Clear outcomes. Client discretion.

Engagements across SOC 2 readiness, ISO 27001 and ISO/IEC 42001 internal audits, vCISO leadership, and third-party risk review focus on objective evidence, useful findings, and reports leadership can act on. Detailed client examples will be published only with permission.

SOC 2

Audit readiness programs

Scope and Trust Services Criteria alignment, control gap assessment, evidence review, and a prioritized roadmap ahead of an independent CPA firm examination.

ISO 27001

Information security management system audits

Risk-based internal audits examining management system requirements, operational evidence, applicable controls, and corrective-action follow-through.

ISO/IEC 42001

AI management system audits

Independent reviews of AI governance, risk and impact processes, system lifecycle evidence, monitoring, and management system effectiveness.

vCISO & vendors

Security leadership and third-party risk

Ongoing security direction and executive reporting, plus vendor assessments based on SOC 2 and ISO artifacts, SIG and CAIQ responses, and questionnaires tailored to your business.

Discuss your scope confidentially.

We will confirm fit, independence, timing, and expected deliverables before an engagement begins.

Book a call