Governance, Risk & Compliance (GRC)
Regulators and auditors want to see that ICT risk is managed on paper as well as in practice. We help you write the policies, assess the risks and keep the evidence that shows it.
This work is especially useful for SACCOs and financial institutions facing SASRA, CBK or Data Protection Act requirements, and for any organisation preparing for an external audit.
What this covers
- Drafting and reviewing ICT security policies, procedures and acceptable use rules.
- Risk assessments that map your systems to the threats and controls that matter for your sector.
- Compliance support for the Data Protection Act, 2019 and sector regulators such as SASRA and CBK.
- Preparation for internal and external audits, including evidence gathering and gap reports.