Compliance concierge — multi-framework compliance management.
Single engagement covering GDPR, ISO 27001, Cyber Essentials, DPA 2018, and sector-specific regimes. Managed end-to-end by a named consultant.
Coverage
Six compliance domains managed under a single engagement.
GDPR compliance
Data mapping, ROPA, DPIA facilitation, consent mechanisms, subject access request processes, and ICO liaison. UK GDPR with EU GDPR cross-reference where your data subjects span both regimes.
ISO 27001 readiness
Gap assessment, ISMS build, policy writing, risk register, SOA, internal audit, and certification body coordination. Full lifecycle from zero to certificate.
Cyber Essentials / Plus
Self-assessment preparation, technical verification for Cyber Essentials Plus, and remediation guidance. Includes the required external vulnerability scan.
DPA 2018 compliance
UK Data Protection Act 2018 alignment alongside GDPR. Covers the domestic derogations, exemptions, and ICO-specific expectations that differ from the EU regulation.
Sector-specific regimes
Additional frameworks relevant to your sector — DORA for financial services, UK CSRB for critical infrastructure, PCI DSS for payment processing, or NHS DSP Toolkit for health.
Evidence management
Policy repository, evidence collection schedule, audit trail maintenance, and continuous compliance monitoring. CloudAuditX automated evidence for cloud controls included.
Support models
Quarterly compliance health check. Document review, gap identification, remediation plan. For organisations with existing compliance in-house who want independent oversight.
Monthly check-in, ongoing compliance management, policy updates, audit preparation support. Direct access to a named consultant.
Dedicated compliance manager. Full ownership of your compliance programme — from gap assessment through certification to ongoing maintenance.
How it works
Mapping
We map your current obligations across all applicable frameworks and identify gaps, overlaps, and priority actions.
Delivery
We build, implement, or update the controls. Evidence is collected and organised for audit presentation.
Assurance
Ongoing monitoring, periodic reviews, and audit support. You stay compliant without a full-time compliance hire.
Need compliance support across multiple frameworks?
Book a free 30-minute compliance review. We will map your current obligations and identify the highest-impact actions.