Governance, Risk & Compliance
 Policy Review and Creation |
360° Assessment |
| Cloud Security Config Review |
IR Management Review |
| ISO/NIST |
Business Continuity Management |
Many of our clients are actively seeking new ways to mature their information security and governance posture. To that end, the consulting team at ZeroDayLab encourages our clients to move along our GRC maturity curve where the processes of Governance, Risk and Compliance are improved, strengthened and made more resilient in the face of threat actors and ever-increasing compliance demands from government regulations, industry requirements and corporate reputation.
The processes that sit behind ZeroDayLab’s Governance, Risk and Compliance services include:
Governance
The establishment of policies, procedures and processes that enable continuous monitoring of the security controls implemented within a business. This includes the mechanisms required to balance the powers of the management team to the primary duty of enhancing the prosperity and viability of the business.
Risk
A probability of a threat materialising and the assessment of the impact that an adverse event would have on a business. By undertaking a risk assessment, the aim is to minimise the threat and to reduce the impact of a future event.
Compliance
Enabling an organisation to achieve baseline control requirements through certifications to ISO27001, PCI DSS, SSAE16 (ISAE 3402) that meet the requirements of accepted practice, legislation, prescribed rule, standard or the terms of a contract. ZeroDayLab also advises on legal and regulatory matters such as UK DPA, EU GDPR, FCA, SCC regulations.
- SSAE16
- ISO 27001/2
- PCI DSS
- Capability Monitoring Assessments
- Risk Assessments
- Business Impact Assessments
- Remediation
- Threat Capability Assessment
- EU GDPR
Our consultants help to drive best practice, achieve good governance, reduce and mitigate risk and achieve compliance, in many cases driving competitive advantage in tandem.
Our Senior Consultants are available to discuss your GRC requirements in more detail. We are happy to provide client references and client case studies on request.