We map the personal data you hold, close the gaps against the NDPA and GAID 2025, and write the notices, policies and procedures your staff will actually follow.
NDPA readiness and gap assessment, Data inventory, data mapping and records of processing, Privacy notices, data protection policy and retention schedule, Data processing agreements and third party privacy reviews, Data protection impact assessments.
We assess how information is protected across people, processes and systems, then set out policies, access controls and response plans in proportion to your risk.
Cybersecurity risk assessment, Information security policies and procedures, Network and endpoint security review, Incident response, business continuity and recovery planning, Staff security awareness training.
We set up ownership, classification, retention and access rules so information stays accurate, findable and protected from creation to disposal.
Data classification scheme, Retention and disposal schedule, Records management and digital archiving, Data ownership and stewardship roles, Access reviews and database governance.
We build technology risk registers, review suppliers and give leadership a clear view of where technology exposes the organisation.
IT governance review, Technology risk register, Third party and vendor risk assessments, Technology due diligence for procurement, Governance and policy frameworks.
We find out how AI is already used in your organisation, write an acceptable use policy, assess tools for privacy and security risk, and train staff to use AI well.
AI use inventory, AI acceptable use policy and staff guidelines, AI readiness assessment, AI risk and privacy impact assessment for a specific tool, AI governance framework with roles and approvals.
Not sure where to start?
Most organisations begin with an NDPA readiness assessment. It shows where you stand across all five practices.
Request a consultation