Free practitioner guide

Security & Compliance Starter Kit

The same checklists we open on a first consultation call: a 12-week readiness roadmap, the ISO 27001:2022 mandatory documentation list, a SOC 2 evidence matrix, GDPR and DPDPA privacy checklists, and nine board metrics that survive scrutiny.

• 12-week readiness roadmap

  Phase-by-phase plan with owners, milestones and exit criteria, from scoping to audit readiness.

• ISO 27001:2022 documentation checklist

  Every mandatory record an accredited certification body will ask to see, Annex A aligned.

• SOC 2 evidence matrix

  Trust Services Criteria mapped to controls, systems of record and an observation-window planner.

• Privacy checklists and board metrics

  GDPR and DPDPA readiness lists plus nine security KPIs that hold up in a board review.