Technology

Compliance Council have experience with supporting organisations involved in developing hardware and software products locally and internationally with uplifting their internal processes and controls to align with frameworks, including:

  • ISO 27001:2022 Information security, cybersecurity and privacy protection — Information Security Management Systems — Requirements.
  • NIST Cybersecurity Framework.
  • ISO 9001:2015 Quality Management Systems — Requirements.
  • Australian Federal Government Essential 8 and Information Security Manual.

Our experience is extensive across organisations of many sizes and scopes, including start-ups, mid-stage companies and ASX-listed organisations. Common engagements include:

  • Gap Analysis Assessments and internal audits against the above-mentioned frameworks.
  • Management system implementation.
  • Ongoing information security and quality management advisory.

Some of the technology organisations that we’ve worked with include:

  • Annalise.ai
  • Damstra Technology
  • Sandstone Technology
  • IXUP
  • Enboarder