Governance and compliance

Selling a product into enterprise and government markets depends on the company behind it. Buyers ask who holds the data, how quality is managed, and which digital identity rules the product sits under. Across companies we founded, we built that operating layer and kept it current. The work covered an ISO 27001 information security programme, an ISO 9001 quality management system, registration for the UK Digital Verification Service under the Digital Identity and Attributes Trust Framework (DIATF), and the controls required by European digital identity regulations.

Policies, risk treatment and the evidence for audit were written by the people running the business, then used in certification and in conversations with regulated customers.

What we delivered

• An ISO 27001 information security programme, written and maintained in-house
• An ISO 9001 quality management system for how the company delivers its work
• UK Digital Verification Service registration under DIATF
• Controls and evidence for European digital identity regulations