Step 01
Discover
Understand your business, existing security practices, and the obligations behind the engagement.
What you receive
An agreed scope and a clear understanding of the requirements.
Our Approach
A clear process with defined deliverables
Start with a standalone assessment or extend into remediation and ongoing support. We establish the scope around your requirements and current security practices.
The five steps
What you receive at each step.
Step 02
Assess
Review documentation, interview relevant staff, and evaluate the controls currently in place.
What you receive
Documented findings and identified security or compliance gaps.
Step 03
Report
Explain the findings, prioritize risk, and establish what needs to happen next.
What you receive
A findings report and prioritized remediation roadmap.
Step 04
Improve
Support agreed corrective actions across policies, organizational processes, and technical controls.
What you receive
Improvements and supporting documentation defined by the project scope.
Step 05
Prepare
Organize evidence and support audit preparation, with ongoing assistance where needed.
What you receive
Audit preparation and coordination, with a plan to maintain readiness.
Common questions
Before we begin
Where does an engagement start?
With an initial conversation about your business and requirements. A scoped assessment is often the next step, with remediation and ongoing support agreed separately.
How long does the work take?
Timelines depend on the service, existing controls, and organizational complexity. The service catalogue provides typical ranges. We agree the delivery plan during scoping.
Will you work with our IT provider?
Yes. We work with your internal team or service provider to connect technical controls with governance, documentation, and compliance requirements.
Who issues the audit report or certification?
AssureRidge provides readiness and coordination support. The appropriate independent auditor or certification body issues the formal report or certification.
What should we bring to the first conversation?
Bring any customer request, questionnaire, insurance requirement, or audit deadline that prompted the enquiry. An overview of your systems and existing security documentation is also helpful.
Understand Your Risk. Know Your Gaps. Prepare Your People.
Whether you are preparing for a certification, responding to customer security requirements, reviewing cyber insurance obligations, or strengthening internal governance, the right starting point is understanding where you stand today.