Services

Certification, audit and assurance services for organisations of every size in Hong Kong and Macau.

A tender requirement for ISO certification typically allows less preparation time than organisations expect.

Gap analysis, documentation, training, internal audit and audit support — through to the certification audit and beyond.

ITGC evidence is frequently requested late in the audit cycle, when documentation is hardest to assemble.

IT general and application control review that stands up to your external auditor.

Non-conformities identified close to the certification audit leave limited time for corrective action.

Independent internal audit and management review, with findings closed before the certification body arrives.

An automated scan and a penetration test report are different deliverables, and clients increasingly distinguish between them.

Manual penetration testing, red teaming, cloud configuration review and application security testing.

Requirements for AI governance typically arrive from two directions at once: client procurement and board oversight.

An AI inventory, risk and impact assessment, and a management system aligned to ISO/IEC 42001.

Whether staff can explain the management system to an auditor depends on how well they have been trained.

Internal auditor training, ISO awareness workshops and management briefings, in Cantonese, English or Putonghua.

Not sure what you need?

Tell us what triggered this and we will tell you whether we are the right firm.

Get a Quote Read the FAQ