Financial Services
SOC 2 Type II for a pan-European fintech
End-to-end readiness, control design and Type II attestation across security, availability and confidentiality TSC.
Projects
Selected engagements.
A snapshot of work delivered for regulated industries across Europe and the Middle East.
Energy
ISO 27001 implementation for critical infrastructure operator
Information security management system roll-out across 14 sites, including risk treatment plan and certification audit support.
Public Sector
Security protocols for critical installations
Designed long-term security protocols aligned with international frameworks, including continuity and incident response.
Technology
EU AI Act readiness for a SaaS provider
AI risk assessment, governance framework aligned to ISO/IEC 42001 and remediation roadmap for high-risk systems.
Banking
GRC platform implementation
Vendor selection, deployment and integration of an enterprise GRC suite to consolidate risk, compliance and audit workflows.
Healthcare
GDPR & Law 124 (Albania) compliance program
Cross-jurisdictional privacy program covering data mapping, DPIA process and vendor risk for a multinational health platform.