Consulting practice
Compliance frameworks and controls for ICT, privacy and industry obligations, including POPIA.
South African organisations face a growing list of obligations that land on ICT, from the Protection of Personal Information Act (POPIA) to industry regulation and contractual requirements. Compliance management turns that list into controls you can operate and prove.
Our compliance approach is based on, and integrates with, enterprise governance, risk and compliance. Alongside country-, industry- and organisation-specific requirements, we assess, define, implement and manage compliance frameworks, strategies, plans, programmes and solutions.
Typical work includes an obligations register, a mapped control set, privacy compliance for personal information, and the monitoring and evidence needed for internal and external audit. We have defined ICT compliance frameworks and architectures, including privacy compliance, for large organisations.
We implement integrated GRC solutions so obligations, controls and evidence stay linked and current, often connected to business process management, assurance and policy enforcement tools. The ICT compliance assessment and ICT compliance FastTrack offer fixed-scope starting points.
Business
GRC software that keeps policies, risks, controls and evidence in one place for assurance.
Business
Document, records and content management with the retention rules your regulators expect.
Cyber
Identity and access management that gives each user the right access and removes it when they leave.
Yes. We assess how personal information is processed and secured, and define the policies, controls and evidence needed to meet POPIA, including the security safeguards it requires.
A list of the laws, regulations, standards and contracts that apply to you, mapped to the controls that satisfy each one and the people who own them.
No. We help you build and operate compliance controls and the evidence behind them, which makes internal and external audits faster and more reliable.
A fixed-scope assessment shows where you stand and what to fix first. Tell us what you need and we will propose the right one.