Security, governance, risk and compliance simplified

Practical solutions and advice. Broad management capabilities. Deep technical expertise.

IT Governance is a leading global consultancy of IT governance, risk management and compliance solutions. We advise global businesses on their most critical issues and present cost-saving and risk reducing solutions based on international best practice and frameworks.

Our unique combination of technical expertise and solid track record in international management system standards means we can deliver a complete solution and manage the project from start to finish.

We work shoulder to shoulder with our clients to help them protect and secure their intellectual capital, comply with relevant regulations, improve their defences and deploy strategies that benefit the entire business.

Our consultancy expertise

Our global experts are specialists in the fields of international management standards, cyber security, information security, IT governance and risk management. As part of our work with organisations in all industries, we have managed hundreds of projects around the world.

We’re independent of vendors and certification bodies, and encourage our clients to select the best fit for their needs and objectives. We have multi-disciplinary teams that can undertake rigorous penetration testing of your systems and networks, project managers to roll out your implementation projects, and executive expertise to brief your board and develop a suitable risk mitigation strategy.


General Data Protection Regulation (GDPR)	IT governance, risk management and compliance (IT GRC)
We can supply best-practice solutions for GDPR compliance, from understanding your position and developing a remediation roadmap through to implementing a best-fit data protection framework.	Our IT GRC Consultancy team is one of the most experienced in the UK. With over fifteen years of practical experience working on projects in a range of public- and private-sector organisations across a variety of market sectors, we can provide consultancy services covering any framework or management standard to any organisation, anywhere in the world.
Read more	Read more


Cyber security and the CCSC scheme	Technical services, Cyber Essentials and PCI DSS compliance
With a strong background in ISO 27001 and cyber security, combined with extensive expertise working with both the private and public sectors, we can help with your G-Cloud, ISAE 3401/SSAE 16, cyber incident response projects, and SOC 2 and 3 audits, in addition to CESG’s Certified Cyber Security Consultancy (CCSC) scheme.	We can undertake penetration and security testing, annual audits for compliance with international standards, and provide professional advice on information security strategy. As a PCI Qualified Security Assessor (QSA) company, our PCI DSS consultancy services include scoping, gap analysis, remediation support and audit. We are also an accredited certification body for the UK Government’s Cyber Essentials scheme.
Read more	Read more

General Data Protection Regulation (GDPR)

We can supply best-practice solutions for GDPR compliance, from understanding your position and developing a remediation roadmap through to implementing a best-fit data protection framework.

IT governance, risk management and compliance (IT GRC)

Our IT GRC Consultancy team is one of the most experienced in the UK. With over fifteen years of practical experience working on projects in a range of public- and private-sector organisations across a variety of market sectors, we can provide consultancy services covering any framework or management standard to any organisation, anywhere in the world.

Cyber security and the CCSC scheme

With a strong background in ISO 27001 and cyber security, combined with extensive expertise working with both the private and public sectors, we can help with your G-Cloud, ISAE 3401/SSAE 16, cyber incident response projects, and SOC 2 and 3 audits, in addition to CESG’s Certified Cyber Security Consultancy (CCSC) scheme.

Technical services, Cyber Essentials and PCI DSS compliance

We can undertake penetration and security testing, annual audits for compliance with international standards, and provide professional advice on information security strategy. As a PCI Qualified Security Assessor (QSA) company, our PCI DSS consultancy services include scoping, gap analysis, remediation support and audit. We are also an accredited certification body for the UK Government’s Cyber Essentials scheme.

Why work with IT Governance?

Our consultancy delivery methods are guaranteed to suit all budgets, timescales and project approaches. We can deliver face-to-face consultancy wherever you need it and, thanks to our online delivery, we can also provide cost-effective remote consultancy and in-house training anywhere in the world.

Flexible, global delivery
Ongoing support
100% certification guarantee
Free, no obligation advice
Transparent pricing
Unbiased, impartial and vendor-neutral
Integrated approach to compliance
Multi-disciplinary teams

Clients that use IT Governance

No project is too big or too small. We have a wide range of consultancy delivery methods, guaranteed to suit all budgets, timescales and project approaches – wherever you are. We’ve worked with public- and private-sector organisations of all industries and sizes, from micros to multinationals, and have successfully executed projects all around the world.

Get in touch now by calling us on +44 (0)845 070 1750 to discuss your consultancy needs.

Client testimonials

We can help you start a project within days of our first contact, and complete it well within your target dates, as our clients will tell you:

‘I would have no hesitation in recommending IT Governance to others. The main advantage was their flexibility. IT Governance tailored their services, to our specific needs.’

Paul Berry, Senior Project Manager, Martin Dawes Solutions

‘We turned to IT Governance as they had the expertise and experience of helping organisations comply before and so took the stress away, allowing us to concentrate on other things.’

Anil Pitalia, CEO of SpaMedica

‘We used IT Governance during our project and you really learn a lot from a few days’ consultancy. They will steer you in the right direction.’

James Ellis, IT Administrator, Pindar Plc

For more client testimonials and details of projects we’ve undertaken, please see our consultancy case studies page >>

Let’s work together

Whatever the nature or size of your problem, we are here to help. Click the button below to request a call and one of our experts will get in touch as soon as possible.

Speak to an expert

Please contact us for further information or to speak to an expert.