Risk & Compliance
NDPA readiness: five questions to ask this quarter
Five practical questions that show how ready your organisation is for the Nigeria Data Protection Act 2023.
Sep 12, 2026 1 min read
Outsourced Assurance Roles
The expertise you need, without a full-time hire.
Compliance leadership without the full-time hire. Not every organisation needs, or can justify, a permanent in-house function, so we embed as your senior assurance leadership on a fractional, ongoing basis.
Who it's for
- SMEs and startups without a DPO or compliance officer
- Growing companies that need senior expertise part-time
- Teams that need short-term capacity for a certification project
Problems we solve
- A legal duty to appoint a DPO but no suitable person
- Compliance work falling to someone who also has another job
- Seasonal peaks around audits and certifications
- Hiring senior specialists takes too long or costs too much
What is included
Everything under Outsourced Assurance Roles
Data Protection Officer (DPO) as a Service
An outsourced DPO managing DPIAs, breach response, regulator liaison and ongoing NDPA and GDPR accountability.
ISO Lead Implementer as a Service
An embedded lead to design, build and operationalise ISO 27001, 22301, 9001 and other management systems.
ISO Lead Auditor as a Service
An outsourced lead auditor running independent internal audit programmes.
Virtual Risk and Compliance Officer
Ongoing oversight of your risk register, compliance calendar and regulatory reporting.
Roles
Choose the role you need
Data Protection Officer (DPO) as a Service
We act as your outsourced DPO, managing DPIAs, breach response, regulator liaison and ongoing NDPA and GDPR accountability.
ISO Lead Implementer as a Service
We embed as your ISO Lead Implementer to design, build and operationalise management systems such as ISO 27001, 22301 and 9001.
ISO Lead Auditor as a Service
We serve as your outsourced Lead Auditor, running independent internal audit programmes without the overhead of a full-time hire.
Virtual Risk and Compliance Officer
Ongoing oversight of your risk register, compliance calendar and regulatory reporting: senior expertise, fractional commitment.
Engagement models
Pick the model that fits
Monthly retainer
A fixed number of days each month for steady, ongoing support.
Project-based
A defined scope and end date, such as a certification project.
Hybrid
A small retainer with extra days available when you need them.
Onboarding timeline
-
Day 1 to 2
Kick-off
Confirm scope, access and stakeholders.
-
Week 1
Baseline
Review existing records, risks and obligations.
-
Week 2
First plan
Agree priorities and the first quarter's actions.
-
Ongoing
Delivery and reporting
Monthly reports and regular check-ins.
Our approach
How we deliver Outsourced Assurance Roles
-
1
Analyse
Understand your obligations, size and current maturity.
Typical deliverable: Needs summary
-
2
Plan
Agree the role, hours, reporting and escalation.
Typical deliverable: Engagement charter
-
3
Execute
Your named professional starts delivering against the plan.
Typical deliverable: Monthly work log
-
4
Report
Regular reporting to your leadership on risks and actions.
Typical deliverable: Monthly report
-
5
Monitor
Review the engagement and adjust as your needs change.
Typical deliverable: Quarterly review
Benefits
- Senior expertise on demand
- A clear package with predictable monthly cost
- Fast onboarding
- Scale up or down as needs change
Typical deliverables
- Role charter and responsibilities
- Monthly activity and risk report
- Registers and records maintained on your behalf
- Regulator-facing support when needed
Outcomes
- Compliance owned by a qualified professional
- Fewer surprises at audits and regulator reviews
- Your team free to focus on the business
FAQ
Frequently asked questions
Do we need a Data Protection Officer?
Under the NDPA 2023, organisations that process personal data of a significant number of people, or sensitive data, may need a DPO. We can assess your position and, if you need one, provide the role as a service.
How quickly can someone start?
Most engagements start within two weeks of agreeing scope.
01
GRC Advisory & Certification
Design, implement and certify management systems that turn compliance obligations into operating discipline.
- Gap assessment report
- Risk assessment and treatment plan
- Policy and procedure set
Audit & Attestation
Independent verification of management systems, technology, regulatory compliance and internal controls.
- Audit plan and scope statement
- Findings register with risk ratings
- Management report
Cyber Offense Services
Vulnerability assessment and penetration testing, plus quarterly ASV scanning for PCI DSS.
- Rules-of-engagement document
- Technical report with evidence
- Executive summary
Enquire about Outsourced Assurance Roles
Tell us what you need
Share a few details and a specialist will reply within one working day.
Let us assure your next move
Tell us about your organisation and we will recommend the right path to compliance, within one working day.