about us.
We are a boutique Governance, Risk, and Compliance (GRC) advisory specialising in cybersecurity, privacy, and IT assurance.
mission
Our mission is to empower organisations to tackle the challenges of digital risk and compliance through a strategic, hands-on approach.
vision
We envision a future where cybersecurity is not just a checkbox or an IT issue, but a vital business driver and a part of your corporate strategy.
competitive edge
Our competitive edge comes from our deep industry expertise, which enables us to provide tailor-made services that align with your organisation's unique needs.
our services.

1 | Information & Cyber Security
-
Implementation of holistic information security programmes based on recognised standards and frameworks (e.g.ISO 27001, NIST, CIS).
-
Cybersecurity regulatory compliance (e.g. DORA, NIS2, PSD3)
-
Cyber risk identification, evaluation and reporting.
-
On-going support and monitoring of the information security programme (vCISO).

2 | Privacy & Data Protection
-
Implementation of holistic privacy management programmes based on ISO 27701.
-
Data protection compliance with GDPR.
-
Privacy risk identification, evaluation and reporting.
-
On-going support and monitoring of the information security programme (vDPO).

3 | IT Audit
-
Enabling internal audit functions to perform IT Audit activities via outsourcing or co-sourcing arrangements.
-
Audit of Information Technology General Controls (ITGCs).

4 | Controls Assurance
-
SOC 2 Readiness Assessments: designed to report on any control gaps and get you on a fast path to resolution before the start of the audit period.
-
SOC 2 Audit Assistance: aimed at the collection process, which can take a considerable amount of time and effort from your employees.
-
SOC 2 Complete Management & Outsourcing: a programme designed to allow our team of professionals to continuously work with you during the audit period to meet all the control objectives.
© 2024 ICON Advisory. All rights reserved.