Compliance consulting
From gap analysis to audit day: a clear road map and the evidence to back it.
- Gap analysis
- PCI guidance and planning
- PCI scanning
- Onsite audit preparation
- Remediation support
- Internal audit
What it is
The first step to any compliance goal is a clear understanding of the scope of the controls, the sensitive business data involved and how key people interact with it.
Our gap analysis shows how effectively your controls are implemented and where the weaknesses are, so effort goes where it counts. It ends in a road map to compliance and continues through to audit support.
Our approach
01
Scope
Identify critical information assets and where regulated data lives.
02
Gap analysis
Assess each control against the standard.
03
Road map
Prioritise remediation into a realistic plan.
04
Build evidence
Policies, records and proof that controls operate.
05
Audit support
Internal audit, then support through the formal assessment.
What you receive
- Gap analysis report
- Remediation road map
- Policy and procedure set
- Evidence register
- Internal audit report
Standards referenced
PCI DSS v4.0.1ISO/IEC 27001:2022ISO/IEC 27002:2022NIST CSF 2.0CERT-In
compliance-consulting-report.pdf
Redacted example- 01Scope and data flows
- 02Control-by-control gap analysis
- 03Risk-ranked gaps
- 04Remediation road map
- 05Evidence checklist
- Asset
- .
- Issue
- Default credentials on admin console
- Evidence
- CVSS
- 8.8
- Fix
- Change and vault the password; restrict console to the admin network
- Status
- Re-tested: closed