Risk assessment, internal audit, vendor risk management, and control assessment — 14 products
The risk register your board keeps asking for. Finally done right.
Complete vendor risk programme — 18 procedures and 6 operational workbooks. Aligned with ISO 27036, ISO 27001:2022, Shared Assessments SIG, DORA Article 28, and NIS2.
Complete cyber risk programme — 16 governance documents and 6 analytical workbooks with FAIR + Monte Carlo quantification. Aligned with NIST CSF 2.0, ISO 27001:2022, CIS Controls v8, and MITRE ATT&CK.
Your people are your perimeter. Give them material that sticks.
Focused phishing awareness: recognition patterns, reporting procedures, simulated exercises. Three editable Word documents. Entry-level scope — deploy across every role without finance approval.
Your auditor asks for policies. Hand them these. Watch them nod.
Policies that pass audits — written by someone who knows what auditors look for.