Compliance and regulation
Internal audit, gap assessment and due diligence
Functionally segregated review for audits, customers, committees and corporate transactions.
What it involves
What we do
We assess the true state of compliance with sound judgement and functional segregation: internal audit of management systems, gap assessment against standards, readiness review before certification and technology due diligence in acquisitions and mergers.
What's included
- Internal audit for ISO 27001, ISO 22301, ENS and ISO/IEC 42001
- Gap assessment against NIS2, DORA, CRA and the AI Act
- Readiness review ahead of certification or inspection
- Cybersecurity due diligence in corporate transactions
- Continuity and resilience review
- Report with findings, risks and action plan
Who it's for
- Certified organisations that need an independent internal auditor
- Funds and buyers in M&A processes
- Entities preparing for an inspection or external audit
Deliverables
- Audit report
- Findings and risk matrix
- Prioritised action plan
Reference frameworks and standards
Reference frameworks used to design, implement, review and evidence. They are not presented as our own certifications unless contractually applicable.
How we approach it
- DiscoverWe get to know your business, environment, risks and priorities.
- AnalyseWe assess maturity, exposure, compliance and real capabilities.
- DesignWe define strategy, roadmap, architecture and action plan.
- ImplementWe deliver controls, processes, technology and evidence.
- OperateWe monitor, respond and support continuous improvement.
- OptimiseWe measure results, reduce risk and evolve capabilities.
Related services
More in Compliance and regulation
Spanish National Security Framework (ENS)
Adaptation, implementation and preparation for ENS certification for public administrations and their suppliers.
Demonstrate- Categorisation report
- Statement of applicability
- Adaptation plan
NIS2
Adaptation to the NIS2 Directive for essential and important entities.
Demonstrate- Applicability report
- NIS2 gap assessment
- Adaptation plan
DORA
Digital operational resilience for financial entities and their ICT providers.
Demonstrate- DORA gap assessment
- ICT risk framework
- Provider register
ISO/IEC 27001
Implementation and certification of the information security management system.
Demonstrate- Documented ISMS
- Statement of applicability
- Internal audit report
NIST CSF and CIS Controls
Maturity assessment and improvement plan based on internationally recognised frameworks.
Demonstrate- Maturity report
- Target profile
- Prioritised improvement plan
GDPR and LSSI
Data protection and compliance with information society services regulation.
Demonstrate- Record of processing activities
- DPIA
- Legal texts and contracts
Let's talk
Does Internal audit, gap assessment and due diligence fit your situation?
Tell us about your challenges and let's design together the best strategy to protect and strengthen your business.