Typical coverage
The scope follows the system.
These are common areas, not a pre-filled checklist. Final coverage is agreed around the environment, risks, access, and decisions the engagement needs to support.
01Gap analysis
02ISMS scope
03Risk treatment
04Policies
05Evidence model
06Audit preparation
What leaves the engagement
Output somebody can own.
01
Prioritised readiness plan
02
ISMS documentation
03
Control ownership model
04
Stage 1 and 2 preparation
Interactive lab
Explore the immersive model for this practice.
Start a conversation
Start with the system and the decision.
Tell us what is in scope, what is changing, and who needs to act on the output. We will shape the method around that context.
Start a conversation