Advisory · Audit · Assurance
Mbrojtja e të Dhënave — Konsulencë për mbrojtjen e të dhënave personale, Komisioneri IDP, gjoba, GDPR Albania, Ligji 124, ISO 27001, SOC 1, SOC 2, Penetration Test dhe Cyber Security në Shqipëri
We provide knowledgeable, professional support and tailor-made solutions in the field of privacy, data protection, governance, risk, compliance & audit.
About usIndependent advisors. Trusted by regulated industries across Europe, the Balkans and the Middle East.
About us
MH Consulting operates across Albania and the wider Balkan region, delivering specialized services in IT Governance, Risk and Compliance (IT GRC), Information Systems Auditing, and information security for regulated industries — with over 10 years of hands-on experience in IT audit within the banking sector and other highly regulated environments.
We have proven expertise in the implementation and assessment of ISO/IEC 27001:2022 Information Security Management Systems, and in the rollout of GDPR and Albanian Law No. 124/2024 compliance frameworks — from data mapping and risk assessments to policy development, control implementation and audit readiness.
Through an exclusive cooperation agreement with a UK-headquartered advisory firm with offices in Poland and the UAE, we combine strong local execution with international methodologies, frameworks and assurance standards — supporting clients across finance, energy, ICT and the public sector.
Led by an experienced IT GRC Auditor with hands-on expertise in GDPR and Law 124 (Albania) implementation and ISO 27001 implementation.
Our company in numbers
more than
80+
SOC engagements delivered
more than
500+
Audit, GRC, IT, cyber & privacy projects
more than
80+
International qualifications held
SOC Services
We offer comprehensive attestation services across SOC 1, SOC 2, SOC 2+ and SOC 3 reports. Our experience spans audits for clients in financial services and ICT, with a tailored approach for each organization to ensure accurate assessment of internal controls and compliance with relevant criteria.
Beyond audit, we provide SOC consultancy and specialized training — helping clients prepare for engagements, identify gaps, and develop strategies to sustain SOC compliance over the long term.
SOC 1 Audit
Controls relevant to financial reporting.
SOC 2 Audit
Trust Services Criteria attestation.
SOC 2+ Audit
TSC combined with additional frameworks.
SOC 3 Audit
Public-facing trust report.
Services overview
Ten practice areas, one integrated team — bringing together cybersecurity, governance, audit and emerging technology expertise.
Cybersecurity & Resilience
Risk assessment, ISO 2700x, NIST, CSA STAR, FedRAMP, business continuity.
New Technologies
IT strategy, COBIT 2019, ITIL, ISO 20000, technology adoption advisory.
GRC
Integrated governance, risk and compliance — frameworks, audits, GRC tooling.
Audit & Assurance
ISAE 3402, SSAE 18, SOC 1/2/3, ISO 27001, GDPR & Law 124 (Albania) audits.
AI Compliance & Security
EU AI Act, ISO/IEC 42001, AI risk and governance frameworks.
Privacy
GDPR & Law 124 (Albania) — data mapping, privacy audits, regulatory alignment.
Pen Testing & Red Teaming
IT/OT testing simulating real-world attacks across people, process, tech.
Cloud Security Architecture
Secure-by-design AWS, Azure and GCP environments with DevSecOps.
SOX & J-SOX
Internal control assessments, risk management and assurance.
ESG
ESG risk assessments, GRI/SASB reporting, climate strategy.
Let's talk about your next engagement.
Independent advice from a team that has delivered for regulators, banks, and global enterprises.
Legal
Privacy Policy
MH Consulting is the operator of this Website and acts as the Data Controller. We process personal data with the utmost care and in accordance with applicable laws — using SSL encryption, a continuous update policy and strict data-processing agreements with our hosting and service partners.
Information you submit through forms is used only for clearly defined purposes such as handling inquiries and business contact. You have the right to access, rectify, erase, restrict, port or object to the processing of your data, and may withdraw consent at any time by emailing support@mhconsulting.al.
Our Competencies
