01 Management System Assurance
Independent audit of QMS, ITSM, BCMS and ISMS against agreed criteria. Implementation and remediation support is available as a separate advisory engagement, with independence safeguards.
vCISO — QMS, ISMS and BCMS
Electronic communications
Context
A regulated electronic communications operator required accredited quality, information-security and business-continuity management systems — a condition of continued operation under essential-entity and licence supervisory requirements. No operable QMS, ISMS or BCMS existed, and no dedicated security leadership was in place to design, implement or operationalise the programme.
Outcome
Integrated management-system architecture designed and implemented — policy framework, technical and organisational controls, risk treatment and evidence base.
Internal audit function established; first audit cycle completed.
Management review cycle operationalised for continual improvement.
ISO 9001:2015, ISO/IEC 27001:2022 and ISO 22301:2019 certification achieved on first audit — zero major non-conformities — within 8 months.
vCISO transitioned to a retained advisory model post-certification, supporting surveillance audits and regulatory reviews.
Regulatory compliance achieved; access unlocked to government and public-sector tenders requiring accredited certification; security governance embedded for long-term sustainability.