Information Security Advisory

Security, governance and compliance, one service or a connected programme.

Praegis works with organisations to establish, improve and sustain information security and GRC programmes. We start from how your business actually operates, then build the policies, controls, evidence and ownership that let you meet customer, regulatory and board expectations.

Our services run from ISO management systems and assurance readiness to data protection, AI governance, security testing, awareness and regulatory advisory. You can engage us for one service or for a connected programme.

A clear line on certification. Praegis provides gap assessments, implementation, documentation, remediation and readiness support. Independent accredited certification bodies issue ISO management system certificates, and independent auditors issue SOC reports.
A man and a woman discussing charts on a laptop and a clipboard report at a shared desk
Ten advisory services

Choose the service that fits where you are today.

01

Information Security Management Systems

We help you design, implement and operate an ISMS aligned to ISO/IEC 27001, so security is managed through clear risks, owned controls and evidence rather than good intentions.

ISO/IEC 27001ISO/IEC 27002ISO/IEC 27005
View service
02

Privacy and Data Protection

We build data protection programmes that fit how you collect, use and share personal data.

NDPA 2023GAID 2025GDPR
View service
03

Governance, Risk and Compliance

We help you build a GRC programme that connects governance, risk and compliance instead of running them as separate exercises.

ISO 31000COSO ERMISO/IEC 27001
View service
04

AI Governance and Assurance

We help you adopt AI with accountability.

ISO/IEC 42001NIST AI RMF
View service
05

Business Continuity and Resilience

We help you prepare for disruption before it happens.

ISO 22301
View service
06

IT Service Management and Quality Management

We help you run services and processes consistently.

ISO/IEC 20000-1ISO 9001
View service
07

Anti-Bribery, Compliance and Management Systems

We support organisations that need additional management system standards.

ISO 37301ISO 37001ISO 14001
View service
08

Security Education, Training and Awareness as a Service

We run security awareness as an ongoing programme, not an annual slide deck.

ISO/IEC 27001SOC 2
View service
09

Vulnerability Assessment and Penetration Testing

We test your applications and infrastructure the way an attacker would, within agreed and authorised boundaries, and report what we find with clear, prioritised guidance your technical teams can act on.

OWASPNIST SP 800-115CIS Benchmarks
View service
10

Regulatory Intelligence and Compliance Advisory

We help you keep pace with the rules that apply to you.

NDPA 2023GAID 2025Sector regulation
View service
Not sure where to start?

Tell us what you are working towards and we will point you to the right service.

Tell us about your situation and we will suggest where to start.