Governance, risk & compliance
A unified enterprise framework for governance, risk management and compliance, tailored to your organization.
Integrated GRC Solutions.
Stronger Governance. Smarter Risk Management.
Empowering organizations through nine integrated Governance, Risk & Compliance services designed to strengthen accountability, manage enterprise risks, ensure regulatory compliance, and drive sustainable business performance.
GRC & Regulatory Compliance
Governance, risk, compliance and internal controls in one framework.
ISO Management Systems & Certification
Gap analysis, implementation, internal audit and certification.
Digital Trust & Cybersecurity
ISMS, cyber risk, privacy and cloud security.
Sustainability & ESG
ESG strategy, GRI reporting and measurable impact.
HSE & Operational Excellence
Health, safety, environment and operational controls.
Accident & Incident Investigation
Independent root-cause investigation and CAPA.
Training & Capacity Building
Accredited programs, from awareness to corporate academies.
Technical & Specialist Advisory
Specialist expertise for complex, high-risk decisions.
SIRI: Industry 4.0 Readiness
Smart Industry Readiness assessment and roadmap.
How we deliver it
A structured path from assessment to continuous improvement, tailored to each organization's context.
Govern
Set strategy, policies, objectives and accountability.
Identify
Map processes, stakeholders, obligations, standards and risks.
Assess
Evaluate enterprise, HSE, cyber, environmental and compliance risk.
Control
Design and deploy policies, procedures and technical controls.
Comply
Align with ISO standards, laws, regulations and industry frameworks.
Assure
Monitor performance through KPIs, audits and management review.
Improve
Drive corrective action, lessons learned and continual improvement.
What you get
- GRC strategy & roadmap
- Risk register & risk treatment plan
- Compliance obligations register
- Policies, procedures & control framework
- Management system integration plan
- Training & awareness programs
- Internal audit reports & assurance
- Management dashboards & KPIs
GRC & Regulatory Compliance
One governance framework, one risk view and continuous compliance across the organization, built into daily operations rather than kept on paper.
Governance Advisory
Governance frameworks, board and committee structures, policies and decision-making models aligned with strategy.
Enterprise Risk Management
Risk frameworks, assessments, registers and treatment plans aligned with ISO 31000 and COSO ERM.
Regulatory Compliance
Adherence to local, regional, international and contractual requirements, tracked and evidenced.
Management Systems Integration
One governance architecture covering ISO management systems, GRC processes and regulatory requirements.
Policies, Procedures & Controls
Policies, SOPs and controls that turn requirements into daily practice.
Internal Controls
Design, mapping and effectiveness testing of business, operational, financial, technology and compliance controls.
Internal Audit & Assurance
Independent audits, compliance reviews and maturity assessments that give leadership confidence.
Not sure where to start?
Our team can assess your current governance, risk and compliance maturity and recommend the right roadmap.
Standards, frameworks & alignment
ISO standards
- ISO 9001Quality Management
- ISO 14001Environmental Management
- ISO 45001Occupational Health & Safety
- ISO/IEC 27001Information Security
- ISO 22301Business Continuity
- ISO/IEC 20000-1IT Service Management
- ISO 27701Privacy Information Management
- ISO 31000Risk Management
- ISO 37001Anti-Bribery Management
- ISO 37301Compliance Management
- ISO 37000Governance of Organizations
Global frameworks
- NIST CSF 2.0Cybersecurity
- COBIT 2019IT Governance
- COSO ERMEnterprise Risk Management
- PCI DSSPayment Card Industry
- SCFSecurity Controls Framework
- NFPAFire & Life Safety
- GDPRData Protection & Privacy
- GRISustainability Reporting
Regional requirements
- NCA / NCSACybersecurity, KSA
- SDAIAData & AI, KSA
- SAMAWhere applicable, KSA
- ZATCATax & Compliance, KSA
- JordanNational regulations
- UAERegulatory requirements
- GCCQatar, Bahrain, Oman & others
ISO Management Systems & Certification
Implement, train, audit, certify and improve. We support organizations across the full lifecycle of ISO management systems, from gap analysis and implementation to internal audit and certification through international certification partners.
Gap Analysis & Readiness Assessment
Clause-by-clause assessment of current practices, maturity and gaps, with a prioritized roadmap to certification.
Management System Design
Management systems built around your actual processes, risks and objectives, not unnecessary documentation.
Implementation Support
Hands-on support to operationalize the system, deploy controls and build effective implementation evidence.
Integrated Management Systems (IMS)
Multiple standards combined into one efficient system with shared risk, audit, CAPA and management review.
Internal Audit
Independent internal audits aligned with ISO 19011 to evaluate conformity, effectiveness and certification readiness.
Certification Readiness & Support
Preparation for Stage 1 and Stage 2 certification audits, from readiness review to corrective-action support.
Certification Transfer Support
Smooth transfer of an existing accredited certification, coordinated with the applicable certification partner.
Post-Certification & Continual Improvement
Ongoing support after certification to keep your management system effective and improving.
Organization-wide governance & management systems
Enterprise / Organization
Department / function management systems
IT / Digital
HR / Customer / Governance
Activity / process / sector-specific systems & guidance
Operations / Sector
Digital Trust & Cybersecurity
Protect information, strengthen cyber resilience and enable trusted digital growth. We help organizations govern information security, cybersecurity, privacy, cloud and technology risk through integrated frameworks aligned with business objectives, international standards and regulation.
ISMS & ISO/IEC 27001
Design and implementation of risk-based Information Security Management Systems through to certification readiness.
Cybersecurity Governance
Governance structures that define cybersecurity accountability, oversight and decision-making.
Cyber Risk Assessment
Evaluation of cyber threats, vulnerabilities, business impacts and controls, followed by prioritized treatment.
NIST CSF & Cyber Maturity
Cybersecurity maturity assessments and improvement roadmaps using NIST CSF 2.0 and recognized frameworks.
Privacy & Data Protection
Privacy governance and data-protection controls aligned with applicable legislation, GDPR principles and ISO frameworks.
Cloud Security & Governance
Governance, risk and control frameworks for cloud environments aligned with ISO/IEC 27017 and 27018.
IT Governance & IT Service Management
IT governance and service management aligned with business objectives through COBIT and ISO/IEC 20000-1.
Cyber Resilience & Incident Readiness
Preparing your organization to respond to and recover from cyber events.
Standards, frameworks & alignment
ISO standards
- ISO/IEC 27001Information Security
- ISO/IEC 27017Cloud Security
- ISO/IEC 27018PII in the Cloud
- ISO/IEC 27701Privacy
- ISO 22301Business Continuity
- ISO/IEC 20000-1IT Service Mgmt
Global frameworks
- NIST CSF 2.0Cybersecurity
- COBIT 2019IT Governance
- GDPRData Protection
- PCI DSSPayment Card Industry
Regional requirements
- NCA / NCSACybersecurity, KSA
- SDAIAData & AI, KSA
- SAMAWhere applicable, KSA
- Other regionalCybersecurity regulations
Sustainability & ESG
Turn sustainability commitments into measurable performance. We help organizations build practical ESG governance, sustainability strategies, GRI-aligned reporting and measurable environmental and social performance, integrated with enterprise governance and risk management.
ESG Strategy & Governance
ESG vision, governance, objectives and roadmaps aligned with business strategy.
Materiality Assessment
Identifying and prioritizing the ESG topics that matter most to your business and stakeholders.
GRI Sustainability Reporting
End-to-end support for sustainability reports aligned with GRI Standards.
ESG KPIs & Performance Management
Measurable ESG indicators with clear ownership, targets, data sources and dashboards.
Environmental & Social Impact
Assessing the impacts of operations, projects, services and supply chains and defining mitigation.
Carbon & Resource Efficiency
Structured measurement and management of energy, emissions, water, waste and resources.
ESG Risk & Compliance
Integrating sustainability risks, obligations and opportunities into enterprise risk and governance.
Sustainability Assurance Readiness
Improving the reliability of sustainability data and preparing for external assurance.
Key standards & frameworks
ISO standards
- ISO 14001Environmental
- ISO 50001Energy
- ISO 26000Social Responsibility
- ISO 37001Anti-Bribery
- ISO 31000Risk
Global frameworks
- GRISustainability Reporting
- TCFDClimate Disclosures
- SASBSustainability Accounting
- CDPCarbon Disclosure
- ISSBSustainability Standards
- EU CSRDSustainability Reporting
- UN SDGsSustainable Development
Regional requirements
- NCESEnvironmental, KSA
- SAMAWhere applicable, KSA
- ZATCATax & Compliance, KSA
- LocalEnvironmental regulations
HSE & Operational Excellence
Safer people, controlled operations and stronger performance. We help organizations manage occupational health, safety, environmental and operational risks by turning requirements into practical controls at the workplace and operational level.
Occupational Health & Safety
Hazard identification, OH&S risk management, operational controls and performance monitoring.
Environmental Management
Management of environmental aspects, impacts, compliance obligations and environmental performance.
HSE Risk Assessment
Structured risk assessment using HIRA, JSA/JHA, TRA and other methods suited to the activity.
Operational Risk & Controls
Evaluating high-risk activities and critical controls to reduce incidents, disruption and losses.
Legal & Regulatory Compliance
Identification of applicable HSE legislation, legal registers and compliance evaluation.
Emergency Preparedness & Response
Emergency scenarios, response plans, drills and exercises that test organizational readiness.
Contractor HSE Management
HSE control across the contractor lifecycle, from prequalification to performance evaluation.
HSE Audit & Assurance
Independent site audits and compliance assessments of documented requirements and field implementation.
Standards, frameworks & alignment
ISO standards
- ISO 45001OH&S
- ISO 14001Environmental
- ISO 9001Quality
- ISO 31000Risk
Global frameworks
- NFPAFire & Life Safety
- IndustrySector-specific HSE
Regional requirements
- HSE legislationNational & local laws
Accident & Incident Investigation
Independent investigation, evidence-based root cause and stronger prevention. When serious incidents occur, we provide multidisciplinary investigations that establish what happened, why it happened, which controls failed and what must change to prevent recurrence.
Fire & Explosion Investigation
Independent investigation of fire and explosion events, from scene assessment to corrective actions.
Oil & Gas / Process Safety Incidents
Specialist investigation of process operations, transfer systems and process-equipment incidents.
Crane & Lifting Incidents
Investigation of lifting incidents covering equipment, lifting plans, rigging and operator competence.
HSE Incidents
Independent investigation of injuries, LTIs, near misses and serious HSE events.
Environmental Incidents
Investigation of spills, releases, contamination and environmental-control failures.
Transportation & Logistics Incidents
Investigation of vehicle, tanker, fleet, warehouse and logistics incidents.
Cyber & Information Security Incidents
Assessment of governance and control failures, response effectiveness and business impact.
Business Continuity Events
Investigation of significant disruptions and recovery failures to strengthen resilience.
Mechanical & Electrical Failures
Technical investigation of equipment failures, maintenance history and operating conditions.
Root Cause Analysis & CAPA
Structured techniques that separate immediate, contributing and systemic causes.
Standards, techniques & alignment
ISO standards
- ISO 45001OH&S Incidents
- ISO 14001Environmental Incidents
- ISO/IEC 27001Security Incidents
- ISO 22301Continuity Events
- ISO 31000Risk
- ISO 9001Nonconformity & CAPA
Investigation techniques
- 5 WhyCausal Questioning
- FishboneCause & Effect
- FTAFault Tree Analysis
- BarrierBarrier Analysis
- BowTieThreats & Consequences
- Human FactorsAnalysis
- TimelineEvent Reconstruction
- ChangeChange Analysis
Regulatory & industry
- NFPAFire & Explosion
- Process SafetyMOC, PTW, ESD
- LegislationNational & local
Training & Capacity Building
Build competence, strengthen culture and sustain performance. Practical professional development programs that turn international standards, frameworks and management requirements into skills people apply in their actual roles.
ISO Management Systems Training
Awareness, foundation, implementation and practitioner training across ISO standards.
Internal Auditor Training
Developing competent internal auditors who plan, conduct, report and follow up audits.
Lead Auditor & Advanced Programs
Advanced programs for professionals leading audit teams and complex audit programs.
GRC & Risk Management Training
Practical programs on governance, ERM, compliance, internal controls and risk treatment.
Cybersecurity & Digital Trust Training
Information security, cybersecurity governance, privacy, cloud security and digital resilience.
Business Continuity & Resilience Training
ISO 22301, BIA, continuity strategies, crisis management and exercises.
HSE & Operational Risk Training
Role-based training in safety, environment, hazard identification and operational controls.
ESG & Sustainability Training
Executive and practitioner programs on ESG governance, GRI reporting and sustainability KPIs.
Executive & Board Workshops
Concise executive sessions focused on strategic oversight and accountability.
Customized Corporate Academies
Organization-specific learning journeys that build sustainable internal capability.
Standards, formats & delivery
Standards covered
- ISO 9001Quality
- ISO 14001Environmental
- ISO 45001OH&S
- ISO/IEC 27001Information Security
- ISO 22301Business Continuity
- ISO/IEC 20000-1IT Service Mgmt
- ISO 27701Privacy
- ISO 31000Risk
- ISO 19011Auditing
- OtherCOSO ERM, NIST CSF, GRI
Program formats
- AwarenessSessions
- WorkshopsPractical Learning
- PractitionerPrograms
- Internal AuditorPrograms
- AdvancedPrograms
- ExecutiveBriefings
- AcademiesCorporate
- CoachingOn-the-job
Delivery options
- On-siteAt your premises
- Live onlineVirtual classroom
- HybridCombined delivery
Technical & Specialist Advisory
The right expertise for complex decisions. Access to experienced consultants, technical specialists and subject-matter experts for complex, high-risk and non-routine assignments, combining technical expertise with governance, risk, compliance and assurance.
Technical Advisory & Expert Support
Specialist expertise for complex technical, operational and management challenges.
Independent Technical Review
Independent review of technical deliverables to identify gaps and risks before critical decisions.
Regulatory & Standards Advisory
Translating standards and regulations into practical implementation requirements.
Project Technical Assurance
Independent expert oversight at defined project gates.
Product Compliance & Certification Support
Guidance on product standards, conformity requirements and certification pathways.
Specialist HSE & Process Safety Advisory
Specialist support for high-risk operations, process safety and fire safety.
Data Center & Critical Infrastructure Advisory
Resilience, continuity, security and governance for data centers and mission-critical facilities.
Expert-on-Demand / SME Support
Access to our specialists for projects or temporary capability needs.
Technical Due Diligence & Assessment
Independent technical and compliance assessments that support critical business decisions.
Standards, models & alignment
ISO standards
- ISO 9001Quality
- ISO 31000Risk
- ISO 45001OH&S
- ISO/IEC 27001Information Security
- ISO 22301Business Continuity
- ISO/IEC 17065Product Certification
Advisory models
- On-demandTargeted intervention
- Project-basedDedicated expertise
- Independent reviewExternal assurance
- RetainedOngoing access
- Expert panelMultidisciplinary
Regulatory & technical
- NFPAFire & Life Safety
- ProductConformity regulations
- LegislationNational & local
SIRI: Smart Industry Readiness Index 4.0
Assess maturity, prioritise investment and accelerate Industry 4.0. We support manufacturers in assessing, planning and accelerating their Industry 4.0 transformation using the Smart Industry Readiness Index (SIRI) framework.
SIRI Readiness & Pre-Assessment
Scope definition, stakeholder alignment, evidence review and preparation for an official SIRI assessment.
Industry 4.0 Maturity & Gap Advisory
Structured review across the 16 SIRI dimensions covering Process, Technology and Organisation.
Transformation Prioritisation
High-impact improvement areas aligned with business objectives and KPIs.
Digital Transformation Roadmap
Sequenced initiatives, target capabilities and implementation plans.
Smart Manufacturing Implementation Support
Advisory for automation, connectivity, data and digital governance.
Performance & Maturity Improvement
KPI monitoring, maturity reviews and preparation for future reassessment.
Official SIRI Assessment Coordination
Preparation and coordination with a Certified SIRI Assessor, where required.
Not sure where to start?
Our team can assess your current maturity across these services and recommend the right roadmap.
The SIRI framework
Process
- OperationsPillar
- Supply ChainPillar
- Product LifecyclePillar
Technology
- AutomationPillar
- ConnectivityPillar
- IntelligencePillar
Organisation
- Talent ReadinessPillar
- Structure & MgmtPillar
Strengthen governance, reduce risk.
Talk to our GRC advisors about compliance, ISO and cybersecurity.