ISO/IEC 27001:2022
Information security management readiness
A complete ISMS built to pass a Stage 1 and Stage 2 audit, scoped to your business, not a template dump.
Typically 12–20 weeks to audit readiness
See the scopeCertification-ready in months, not years.
ISO 27001 for information security and ISO 42001 for AI management, designed, documented, and operated with one advisor. Plus quantum technology courses for the teams that have to plan past today's cryptography.
Card, bank transfer, or cryptocurrency via Coinbase for Business.
Two ways we work
Readiness programmes and quantum training
ISO/IEC 42001:2023
AI management system readiness
Governance for the AI you are already shipping: inventory, impact assessment, controls, and oversight that stands up to scrutiny.
Typically 10–18 weeks to audit readiness
See the scope27001 + 42001
Integrated management system programme
One set of controls, one internal audit cycle, two certifications. The efficient path when both standards are in scope.
Typically 16–26 weeks to audit readiness
See the scopeHow a programme runs
Four stages, no template dumps
01
Scope and gap
We fix the boundary, then test every clause and control against what you actually do today.
02
Risk and design
A risk methodology your team can run, and a control set written to your operations.
03
Operate
Records start accumulating early, access reviews, supplier checks, incidents, training.
04
Audit
Internal audit, management review, certification body selection, and support through Stage 2.
Training
Quantum technology courses
Foundation8 hours
Quantum Foundations for Technical Teams
The working mental model engineers need: qubits, superposition, entanglement, and where the real limits sit.
Practitioner2 days
Post-Quantum Cryptography Migration
Build a cryptographic inventory, pick your migration order, and defend the plan to auditors and the board.
ExecutiveHalf day
Quantum Risk for Executives
A board-level briefing on quantum timelines, regulatory pressure, and what to fund this budget cycle.
Practitioner6 hours
Quantum Sensing and Secure Communications
Beyond computing: QKD, quantum networks, and quantum sensing, capability, cost, and honest limitations.
Payment flexibility
We accept cryptocurrency through Coinbase for Business
Settle engagements and course fees in major cryptocurrencies alongside conventional card and bank transfer. Useful for international clients, treasury-held digital assets, and organisations that would rather not wait on correspondent banking.
Insights
Notes from the work
Certification
ISO 42001 vs ISO 27001: what actually differs
Both are management system standards with the same skeleton. The difference is what you are managing, and the evidence an auditor expects.
Post-quantum
Harvest now, decrypt later: sizing the risk honestly
The threat is real but it is not universal. The deciding factor is how long your data must stay confidential.
Certification
What certification auditors actually ask for
Documentation is not the hard part. Demonstrating that your management system is operating is.