The advisory collection
Start with the decision in front of you. Explore our services, understand the deliverables, and request a conversation about the right scope.
01 Find your service
02 Share your priorities
03 Agree the scope
Choose your starting point
Search service names, situations and deliverables. Your search stays in this browser.
10 services
Privacy
A PIA examines how a proposed initiative handles personal information, where risks arise and which controls can help address them.
Launching a product or service involving personal information.
Documented information flows and assessment findings.
Privacy
A DPIA provides a structured assessment of processing activities that may create elevated risks for individuals. The assessment scope reflects the organization, processing context and applicable requirements.
Planning potentially high-risk personal-data processing.
A documented assessment of processing and potential impacts.
Privacy
A PTA is an early screening exercise that identifies privacy implications and helps determine whether an initiative needs a more comprehensive assessment.
Scoping a new project or procurement.
A completed screening record.
Privacy
A privacy maturity assessment examines governance, processes and controls to identify strengths, gaps and a realistic path forward.
Establishing a baseline for your privacy program.
A current-state assessment and gap analysis.
Privacy
Tailored privacy awareness and training materials connect privacy responsibilities to the decisions employees, teams and leaders make in practice.
Onboarding employees into privacy responsibilities.
Training materials tailored to the agreed audience.
Privacy
Develop and review policies, procedures and privacy documentation that reflect how the organization operates and handles personal information.
Creating or refreshing internal privacy policies.
Draft or revised policies and procedures.
Risk
A structured enterprise risk assessment helps organizations identify, document and prioritize risks and consider practical treatment options.
Building a consistent view of organizational risk.
A documented risk assessment or risk register.
Risk
Assess privacy, data and governance risks introduced by vendors and service providers, and establish a more consistent approach to third-party review.
Onboarding vendors that handle organizational data.
Vendor risk findings and documented recommendations.
AI governance
Review how your organization develops, procures, deploys or uses AI, and identify the privacy, accountability and governance considerations that deserve attention.
Adopting generative AI or other AI-enabled systems.
An AI use-case inventory or scoped assessment record.
AI governance
Develop organizational policies and governance documentation that make AI-use expectations, responsibilities and escalation routes clear.
Employees using generative AI without agreed guidance.
AI or generative AI acceptable-use policies.
Try a broader term or clear your filters. If you’re unsure what the work is called, the service guide can help.
Find my serviceStart with the situation that sounds most familiar. Final scope is agreed in your proposal.
Fees and timing depend on the complexity of your organization and the agreed deliverables. We’ll discuss these before you commit to an engagement. Explore pricing and quality.
Your next chapter
Bring us your priorities. Together, we’ll define the scope, the questions that matter and a practical way forward.
Book a consultation