Governance & assurance
Decision rights, operating models, controls and reporting that stand up to scrutiny.
Learn more →Our approach
Engagements are designed around outcomes and decision points, proportionate to organisational context, regulatory exposure and risk posture. We focus on clarity, evidence and sustainability rather than “one-size-fits-all” templates.
Service areas
Six complementary service areas, tailored to your objectives.
ISO/IEC 27001 readiness
Scope, gap analysis, SoA and internal audit support, structured and evidence-aware.
Learn more →Operational resilience
Practical alignment for resilience and regulatory expectations (e.g., DORA / NIS2).
Learn more →PCI-DSS advisory and support
Scoping, gap analysis, risk-based advisory and PCI-DSS security requirements.
Learn more →AI governance & assurance
Scope, gap analysis, ISO/IEC 42001 AI management systems readiness.
Learn more →GDPR and Privacy
Supporting practical GDPR compliance and privacy‑by‑design implementation.
Learn more →Framework and sector consultancy
Turn framework expectations into clear priorities, working controls and evidence. Poleis helps you assess gaps, plan improvements and prepare for assurance.
NIST CSF 2.0
Understand your current cyber security posture, define a target profile and prioritise improvements across governance, protection, detection, response and recovery.
Learn more →NCSC Cyber Assessment Framework
Assess governance and cyber resilience against the relevant CAF profile, organise supporting evidence and develop a practical improvement plan.
Learn more →NHS Data Security and Protection Toolkit
Prepare for your organisation’s applicable DSPT assessment with gap analysis, evidence review and support for cyber security and information governance improvements.
Learn more →DORA readiness
Strengthen ICT risk management, incident processes, resilience testing and third-party oversight through proportionate gap assessment and implementation support.
Learn more →NIS2 readiness
Review cyber risk governance, supply-chain security and incident procedures, with implementation support aligned to applicable national requirements.
Learn more →Gambling Commission security audit support
Prepare applicable remote gambling operations for the security audit through scope review, evidence preparation and remediation planning. Independent audit engagements are considered separately, subject to auditor suitability and independence.
Learn more →TISAX® readiness
Prepare for the automotive sector’s information security assessment through VDA ISA gap analysis, evidence preparation and remediation planning. Formal TISAX assessments are performed by ENX-approved audit providers.
Learn more →Engagements are scoped to your sector, organisation and applicable requirements. For DORA and NIS2, legal interpretation and jurisdiction-specific applicability are confirmed with your legal advisers.
Supporting advisory services
Risk assessments & audit readiness
Current-state reviews, executive risk reporting and prioritised remediation planning.
Explore assurance →Policies & working resources
Tailored policies, assessment toolkits and working templates for consistent implementation.
Explore toolkits →Awareness & human risk
Targeted workshops and role-based learning aligned to organisational risk.
Explore training →