Technology that
connects the pieces.

ISO/IEC 27001 defines requirements for an information security management system; ISO/IEC 27002 provides controls and implementation guidance. Within the agreed project scope, we support technical controls, access models and documentation for your ISMS.

The product quality model helps define properties such as reliability, maintainability and performance. It provides a basis for measurable quality objectives, test requirements and acceptance criteria for your software.

Verifiable security requirements for web applications and services, from authentication and access control to protecting data and interfaces. We agree the appropriate verification scope for each application.

For organisations in scope, we support the technical implementation of relevant requirements, such as access protection, vulnerability management, supply chain security and recovery. Organisational obligations and responsibilities remain part of your wider security management.

SOC 2 refers to an independent examination of controls at a service organisation and its resulting report. We support the preparation of technical controls and evidence through traceable changes, approvals, access logs and operational documentation.

For products in scope, we consider technical requirements for secure development, vulnerability handling, security updates and product documentation. Scope and implementation depend on the product and the applicable requirements.