Bespoke Consultancy

Data protection, CCPA and the GDPR

IT Governance’s data protection consultancy can help you meet the requirements of the EU's General Data Protection Regulation (GDPR), and California's Consumer Privacy Act (CCPA).

ISO 27001 and information security

We’ve successfully helped over 400 companies – from SMEs to FTSE 100 companies – to achieve ISO 27001 certification over the last 15 years.

Whatever your ISO 27001 consultancy needs, we have the right level of service to help you implement an ISO 27001-compliant information security management system (ISMS) quickly and without hassle, whatever your size, sector or location.

We also offer ISO 27001 FastTrack™ Consultancy, with which you can achieve certification in three months for a fixed price.

ISO 22301 and business continuity

IT Governance can provide a comprehensive solution to implementing a business continuity management system (BCMS) based on the international standard ISO 22301, while achieving certification in the shortest possible time.

Our ISO 22301 and business continuity consultancy service includes assessing your current business continuity plans, policies, and procedures, and developing an executive report and prioritized roadmap of recommended activities and solutions, aligned to ISO 22301.

We also offer ISO 22301 FastTrack Consultancy, with which you can achieve certification in four months for a fixed price.

Penetration testing – infrastructure and web application

Penetration testing is the most effective way of demonstrating that exploitable vulnerabilities within your company’s internet-facing resources have been identified, allowing suitable patches to be applied. IT Governance provides a range of bespoke penetration tests that deliver cost-effective and practical solutions to help you meet your legal, regulatory and contractual requirements.

IT Governance is a CREST member company. Clients can rest assured that IT Governance penetration tests will be carried out to the highest standards by qualified and knowledgeable individuals.

PCI DSS compliance

IT Governance is a PCI Qualified Security Assessor (QSA) company. If your organization is a merchant or service provider, IT Governance can help you improve your cybersecurity and comply with the requirements of the PCI DSS in the shortest timeframe and for the minimum cost.

Whether you need help reducing your cardholder data environment (CDE), completing a self-assessment questionnaire (SAQ), or your increased transaction volumes have seen you move up a level and you now need a QSA-led report on compliance (ROC), our QSAs and PCI DSS experts can help you find the right way forward.

ISO 9001 and quality management

IT Governance can help you implement a quality management system (QMS) compliant with ISO 9001. With over 1.1 million certifications worldwide, ISO 9001 is globally recognized as the best framework for helping organizations identify product or service deficiencies and make improvements quickly, resulting in less waste, less inappropriate or rejected work, and fewer complaints.

ISO 20000 and IT service management

IT Governance can provide whatever you need to help you achieve ISO 20000 certification for all or part of your service delivery organization. Services can be provided in a flexible way to suit the needs of your organization.

We also offer ISO 20000 FastTrack™ Consultancy, with which you can achieve certification in three months for a fixed price.

IT Health Check

Security testing provides an appropriate level of assurance that technical vulnerabilities have been identified and effectively controlled. An IT Health Check can include application testing, penetration testing, wireless network testing, security audit, and an internal network vulnerability assessment.