H.5 · Technology Consulting & Advisory
IT Audit & Architecture Assurance
Evidence that a design meets the standard it claims
What we build
Assurance for systems that must satisfy an external standard and prove it. Gap assessment against ISO 27001, IEC 62443, SOC 2, and sector-specific regimes, controls mapped to the architecture rather than to a spreadsheet, design review at each gate with findings raised while they are still cheap, evidence collection automated wherever the system can produce it, and independent verification before an audit rather than after one.
Capabilities
- Gap assessment against ISO 27001, IEC 62443, SOC 2, and sector-specific regimes
- Controls mapped to the architecture and to the code path that implements them
- Design review at each gate, with findings raised while they are still cheap to fix
- Evidence collection automated wherever the system can produce it itself
- Independent verification before an audit rather than after one
- A remediation register with owners, dates, and evidence of closure
Related services
How it connects
Where it sits in the stack.
This service, and the two it hands off to. None of them can be optimised alone.
Audit & Assurance
Assurance for systems that must satisfy an external standard and prove it.
Technology Consulting
Scoped engagements that produce a decision rather than a deck.
Consulting & Advisory · see serviceAI Strategy
An honest assessment before the budget is committed.
Consulting & Advisory · see serviceBring us the whole problem.
Tell us where the work is stuck, whether that is a model that never reached production, an application nobody can change, a data platform nobody trusts, or a plant the business cannot see. An engineer replies with a first read, not a sales deck.