Services

Six ways to get audit-ready and stay that way

Every engagement is independent, senior-led, and built around evidence you can defend. We do readiness and internal-audit work only. We never issue the report or the certificate, which is exactly what keeps our work credible in front of the auditor who does.

SOC 2 · Readiness assessment

Gap Sprint

InvestmentOne‑time

A fixed-scope gap assessment against the Trust Services Criteria or ISO 27001 Annex A: control matrix, evidence-requirements map, and a prioritized remediation roadmap. Know exactly where you stand.

Explore SOC 2 readiness

SOC 2 · Section 3 & control matrix

System Description & Control Matrix

InvestmentOne‑time

We write your Section 3 system description against the AICPA description criteria (DC 200) and build the control matrix your auditor tests against. Audit-defensible, in your voice.

Explore system description

SOC 2 · Audit-ready retainer

Evidence Engine

InvestmentMonthly

Operating-effectiveness monitoring across your whole audit window, a curated evidence repository with chain-of-custody, a mock fieldwork dry run, and liaison with your auditor. Nothing missing at fieldwork.

Explore Evidence Engine

ISO 27001 · Clause 9.2, one cycle

Internal Audit Report

InvestmentOne‑time

One complete, independent internal audit: plan, fieldwork, evidence sampling, findings, and a certification-ready internal audit report your certification body accepts at Stage 1, Stage 2, or surveillance.

Explore internal audit report

ISO 27001 · Internal audit & assurance

Assurance Program

InvestmentAnnual

Outsourced ISO 27001 Clause 9.2 internal audit plus continuous, multi-framework assurance: a full annual audit program, management-review support, Stage 1, Stage 2, and surveillance prep, and an annual readiness statement to leadership.

Explore Assurance Program

SOC 2 · Failing or struggling audit

Audit Rescue

InvestmentScoped to the situation

Mid-audit and drowning in requests, or facing a qualified opinion? We triage the findings, rebuild the evidence, and manage the path back to a clean report.

Explore audit rescue

Every engagement is scoped and quoted individually, in writing, within one business day of a call. How we price · Book a call for pricing

Not sure which engagement fits?

Tell us your framework, your deadline, and what is worrying you. We will tell you, honestly, what it takes and which service actually fits.

Book a discovery call Send a message