Skip to main content
Assuresec Limited
Search the site Switch light or dark theme

Our services

Assurance across every layer of trust.

Five integrated services. One goal: stronger governance, lower risk and lasting trust.

Illuminated Assuresec symbol on a dark office wall

Our five practice areas

One roof. Complete assurance.

From strategy to execution, we bring advisory, audit, offensive security and training together, so you never have to coordinate multiple vendors.

01

GRC Advisory & Certification

Design, implement and certify management systems that turn compliance obligations into operating discipline.

  • Gap assessment report
  • Risk assessment and treatment plan
  • Policy and procedure set
Learn more
02

Audit & Attestation

Independent verification of management systems, technology, regulatory compliance and internal controls.

  • Audit plan and scope statement
  • Findings register with risk ratings
  • Management report
Learn more
03

Cyber Offense Services

Vulnerability assessment and penetration testing, plus quarterly ASV scanning for PCI DSS.

  • Rules-of-engagement document
  • Technical report with evidence
  • Executive summary
Learn more
04

Outsourced Assurance Roles

Embedded DPO, ISO lead implementer and lead auditor services: senior compliance leadership, fractional commitment.

  • Role charter and responsibilities
  • Monthly activity and risk report
  • Registers and records maintained on your behalf
Learn more
05

Continuous Education

Certification-track and hands-on training that builds audit, risk and security capability inside your teams.

  • Course materials and templates
  • Certificate of completion
  • Post-course support for questions
Learn more

Which service is right for you?

Who each service is for

Service Best for Typical outcome Learn more
GRC Advisory & Certification CEOs, CFOs and CISOs facing regulator or customer pressure, Risk and compliance teams building or maturing a programme Cross-border expertise across Africa and other continents View GRC Advisory & Certification
Audit & Attestation Boards and audit committees that want independent assurance, Internal audit teams needing specialist capacity Objective findings ranked by risk View Audit & Attestation
Cyber Offense Services Financial services, healthcare, government, education, SMEs and enterprises, Technical security leads who need proof of method and scope Realistic testing under a clear, agreed scope View Cyber Offense Services
Outsourced Assurance Roles SMEs and startups without a DPO or compliance officer, Growing companies that need senior expertise part-time Senior expertise on demand View Outsourced Assurance Roles
Continuous Education Professionals building a career in GRC, audit or security, L&D managers upskilling teams Hands-on exercises and templates you can reuse View Continuous Education

Who it's for

  • Executive leadershipMake informed decisions with confidence.
  • Risk and compliance teamsMeet regulatory and control requirements.
  • IT and security teamsStrengthen your security posture and processes.
  • Internal audit teamsProvide independent, objective assurance.

Our methodology

  1. 1AnalyseReview requirements, risk profile and existing controls to scope the work.
  2. 2PlanDesign a tailored programme aligned to standards and objectives.
  3. 3ExecuteInterviews, documentation review, inspection and evidence sampling.
  4. 4ReportClear, actionable findings with prioritised remediation guidance.
  5. 5MonitorOngoing support to track remediation and sustain conformity.

Standards coverage

  • ISO/IEC 27001
  • ISO 22301
  • ISO/IEC 20000
  • ISO/IEC 27701
  • ISO 9001
  • ISO 45001
  • PCI DSS
  • SOC 2
  • COBIT
  • SWIFT CSP
  • NDPA
  • GDPR

Listed standards describe the frameworks we advise on and audit against. They are not claims of accreditation.

The right expertise. At the right time.

Talk to our team about your specific needs and get a tailored solution.

Request a consultation